coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
net-kingdom/workplans
History
tegwick abed4360d4 NK-WP-0056-T10: journey-only executor mode; fail-closed proof on the T08 stack 
cli.py --journey-only: read-only, no admission; journey-read role only
(CCR-2026-0059), no Kubernetes/directory client, no approval or audit call;
exit 0 pass / 1 fail closed / 4 refused. Shared operations.journey_from_kv
with the admission check. Synthetic proof: healthy pass, broken svc-authelia
bind fails closed at authelia_first_factor, restored pass, journey token
cannot read the bind; all_met, no values. 45 executor tests.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 19:56:52 +01:00
..
archived repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-07-02.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-14.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-08-23.md repo.work.assign_missing_identifiers 2026-09-04 00:26:59 +02:00
ADHOC-2026-10-03.md repo.work.assign_missing_identifiers 2026-10-03 17:35:11 +02:00
ADHOC-2026-10-10.md chore: record hub ids for NK-WP-ADHOC-2026-10-10 2026-10-10 15:30:28 +02:00
ADHOC-2026-10-11.md repo.work.assign_missing_identifiers 2026-10-14 02:11:30 +02:00
ADHOC-2026-10-16.md repo.work.assign_missing_identifiers 2026-10-16 21:06:22 +02:00
NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof 2026-07-02 22:08:33 +02:00
NK-WP-0009-netkingdom-security-pattern-tutorials.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
NK-WP-0011-enterprise-federation-saml.md NK-WP-0011: set status blocked (sync had reverted backlog to active) 2026-10-28 09:24:17 +01:00
NK-WP-0021-activity-core-ops-sso-operators.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md Finish NK-WP-0022 with verified CoulombCore cluster retirement 2026-10-15 22:10:34 +02:00
NK-WP-0023-user-engine-portal-platform-integration.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0024-user-engine-portal-integration-expansion.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0025-public-self-registration-and-application-jit.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0026-flex-auth-caller-identity-rollout.md fix(workplans): adopt ADR-007 derived identifiers for unregistered records 2026-08-25 20:14:28 +02:00
NK-WP-0027-reef-placement-reconciliation.md Defer reef tasks so backlog remains stable during synchronization 2026-10-15 22:29:08 +02:00
NK-WP-0028-canon-publication-and-grouping-semantics.md chore(registrar): assign State Hub identifiers 2026-08-22 14:54:45 +02:00
NK-WP-0029-scope-and-intent-reconciliation.md chore(registrar): assign State Hub identifiers 2026-08-23 12:02:15 +02:00
NK-WP-0030-deterministic-security-scenario-composition.md feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
NK-WP-0031-deterministic-posture-feedback.md Complete NK-WP-0031 with audit-core freshness adoption evidence 2026-10-15 19:29:41 +02:00
NK-WP-0032-openbao-operator-loopback-callback.md Reconcile infrastructure workplans and retire stale flex-auth references 2026-09-28 12:40:03 +02:00
NK-WP-0033-keycape-secret-exposure-rotation.md Close NK-WP-0034: verify-t06 proven FAIL-then-PASS on production 2026-09-23 21:20:19 +02:00
NK-WP-0034-verification-that-verifies.md Close NK-WP-0034: verify-t06 proven FAIL-then-PASS on production 2026-09-23 21:20:19 +02:00
NK-WP-0035-emission-cadence-security-profile.md NK-WP-0035-T04: readback records audit-core's independent_reader basis 2026-10-28 09:50:58 +01:00
NK-WP-0036-restore-user-portal-client-registration.md Record the human onboarding run and fix password-setup usability 2026-09-23 21:48:29 +02:00
NK-WP-0037-vergabe-company-welcome.md ADR-0016: MFA is a user preference; workloads opt in. Close NK-WP-0037. 2026-09-23 22:21:48 +02:00
NK-WP-0038-tenant-scoped-identity-lifecycle.md Record and pin verified account journey release 2026-09-13 12:29:43 +02:00
NK-WP-0039-flex-auth-access-engine-coordinate-intake.md NK-WP-0039-T04: retire runtime.yaml to owner pointers; finish NK-WP-0039 2026-10-01 21:38:03 +02:00
NK-WP-0040-execution-attribution-receipt.md NK-WP-0040-T02: railiance-infra names the S1 converge wrapper as emitter (babae80) 2026-10-28 09:58:04 +01:00
NK-WP-0041-onboarding-journey-usability.md Fix plus-address sign-in and finish NK-WP-0041 2026-09-27 16:05:03 +02:00
NK-WP-0042-workload-mfa-step-up.md Retain reviewed security workplan consolidation and bindings 2026-10-11 18:46:21 +02:00
NK-WP-0043-cadence-assessment-and-operating-guidance.md Refresh operating guidance and standardize new workplan naming 2026-09-28 12:40:10 +02:00
NK-WP-0044-runbook-packs-for-runbook-tutorials.md Retire the markdown tutorial verifier; close NK-WP-0044 and NK-WP-0009 on rehearsal receipts 2026-10-03 00:01:14 +02:00
NK-WP-0045-root-grant-custody-record.md Finish NK-WP-0045 with verified attended custody recovery 2026-10-03 21:59:22 +02:00
NK-WP-0046-secrets-engine-openbao-client-registration.md NK-WP-0046: finished; all tasks done (live go caafe4be applied 2026-10-07) 2026-10-09 00:23:33 +02:00
NK-WP-0047-platform-password-reset-mail.md docs: complete native reset mail and personal login acceptance 2026-10-06 20:54:42 +02:00
NK-WP-0048-security-case-types.md Workplan triage: NK-WP-0048/0050 blocked, NK-WP-0011 backlog, NK-WP-0053 pulled forward 2026-10-28 09:15:06 +01:00
NK-WP-0049-bootstrap-secret-free-recovery-handoff.md NK-WP-0055: production readiness workplan; NK-WP-0049 finished with residuals moved 2026-10-27 22:06:58 +01:00
NK-WP-0050-playwright-consumer-registration.md Workplan triage: NK-WP-0048/0050 blocked, NK-WP-0011 backlog, NK-WP-0053 pulled forward 2026-10-28 09:15:06 +01:00
NK-WP-0051-sign-in-diagnosis.md Complete NK-WP-0051 with attended member and refusal evidence 2026-10-15 19:23:19 +02:00
NK-WP-0052-wave2-resource-right-sizing.md Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) 2026-10-22 00:58:51 +02:00
NK-WP-0053-identity-restore-drill-cadence.md NK-WP-0054-T05: post-split restore drill passed as admin; SI-X1 retired 2026-10-31 08:31:17 +01:00
NK-WP-0054-service-identity-policy.md Link reset transition checkpoints to State Hub tasks 2026-10-31 14:34:44 +01:00
NK-WP-0055-security-platform-production-readiness.md NK-WP-0055-T08: kingpath off-site receipts uploaded and verified 2026-10-30 22:22:35 +01:00
NK-WP-0056-bounded-executor-path.md NK-WP-0056-T10: journey-only executor mode; fail-closed proof on the T08 stack 2026-10-31 19:56:52 +01:00