Replaces the human-as-operator model from NK-WP-0004 with full agent automation. Agent generates, encrypts (SOPS), injects into cluster, and delivers a single emergency bundle (age key + break-glass passwords). Human only stores that bundle in their personal password manager. KeePassXC removed from operational path. creds-state.yaml redesigned with agent_mode and emergency_bundle_delivered gate. Standard to be updated to v0.2 (T07). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| NK-WP-0001-sso-mfa-platform.md | ||
| NK-WP-0002-local-identity.md | ||
| NK-WP-0003-keycape-privacyidea-cluster-deployment.md | ||
| NK-WP-0004-credential-management-foundation.md | ||
| NK-WP-0005-agent-driven-credential-bootstrap.md | ||