net-kingdom/workplans
tegwick 8db000e5f0 feat(workplan): NK-WP-0005 — agent-driven credential bootstrap
Replaces the human-as-operator model from NK-WP-0004 with full agent
automation. Agent generates, encrypts (SOPS), injects into cluster,
and delivers a single emergency bundle (age key + break-glass passwords).
Human only stores that bundle in their personal password manager.

KeePassXC removed from operational path. creds-state.yaml redesigned
with agent_mode and emergency_bundle_delivered gate. Standard to be
updated to v0.2 (T07).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-21 09:25:36 +01:00
..
NK-WP-0001-sso-mfa-platform.md feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) 2026-03-19 01:22:41 +00:00
NK-WP-0002-local-identity.md feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03) 2026-03-05 09:22:13 +01:00
NK-WP-0003-keycape-privacyidea-cluster-deployment.md fix(sso-mfa): NK-WP-0003-T04 — correct privacyIDEA image and port 2026-03-20 23:54:18 +00:00
NK-WP-0004-credential-management-foundation.md chore(consistency): NK-WP-0004 complete — correct regressed task statuses 2026-03-21 09:19:37 +01:00
NK-WP-0005-agent-driven-credential-bootstrap.md feat(workplan): NK-WP-0005 — agent-driven credential bootstrap 2026-03-21 09:25:36 +01:00