tegwick 47c42f33fb Adopt live flex-auth digests, record rename answers and NK-WP-0033 ruling ... - runtime.yaml: declare the live flex-auth tenant-engine/user-engine digests confirmed by flex-auth, and mark the file reference-only (do not apply): live is ahead of it beyond the digests, including caller-auth enforce. - NK-WP-0039: T02 answered (package coordinate unchanged), T03 narrowed, new T04 to retire or reconcile the stale reference manifest. - NK-WP-0033: record the operator's predecessor-disposition ruling. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e		2026-09-23 20:01:30 +02:00
..
bootstrap	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof	2026-07-02 22:08:33 +02:00
k8s	Adopt live flex-auth digests, record rename answers and NK-WP-0033 ruling	2026-09-23 20:01:30 +02:00
WORKPLAN.md	docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)	2026-03-20 17:16:35 +00:00