coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Open security core for dev sec ops on kubernetes
483 commits 1 branch 0 tags 3.1 MiB
Find a file
tegwick bbdff49abf Refresh work-record index 
Regenerated by fix-consistency; adds the inbound layer-declaration intake.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2564823@bnt-lap001
Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9
2026-08-29 02:45:20 +02:00
.claude docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 2) 2026-07-08 16:41:16 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-08 12:37:33 +02:00
.githooks feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
canon Amend §11: who must declare, and what a declaration is 2026-08-28 23:01:35 +02:00
capabilities/playbooks feat(orchestration): compose security scenarios 2026-08-23 12:40:52 +02:00
docs docs(custody): every credential says what it is 2026-08-28 11:42:51 +02:00
examples feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
history feat(privacyidea): add guarded resolver reconciliation helper 2026-08-23 14:43:39 +02:00
identity-provisioner Track and harden NK-WP-0025 residuals 2026-08-14 19:35:46 +02:00
intakes repo.work.create_intake NET-IN-0001 2026-08-28 23:01:51 +02:00
keys feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
local-identity Local Identity OICD bootstrap 2026-05-02 16:58:44 +02:00
registry feat(posture): add deterministic feedback proposals 2026-08-23 13:16:34 +02:00
sso-mfa fix(privacyidea): repair the resolver reconciliation script (NK-WP-0033) 2026-08-27 22:20:03 +02:00
tests NK-WP-0026 finished: user-engine caller identity verified live against railiance01 2026-08-19 22:01:12 +02:00
tools feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans chore(registrar): assign State Hub identifiers 2026-08-28 11:56:08 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-08-27 22:22:03 +02:00
.gitignore chore: ignore patch backups 2026-08-28 11:54:39 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
.sops.yaml feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
AGENTS.md docs(agents): repoint remote State Hub URL to the in-cluster address 2026-08-25 00:21:25 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:38 +02:00
CONFIG.md feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05) 2026-03-19 08:31:51 +00:00
DECISIONS.md Decision for KeyCape Implementation Language Go 2026-03-26 09:21:17 +01:00
INTENT.md Point layering note at the published standard 2026-08-28 21:21:07 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-29 23:43:45 +02:00
Makefile feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
README.md Security Layer Model v0.4 — audit-core assent and its corrections 2026-08-28 22:54:50 +02:00
SCOPE.md feat(orchestration): compose KeyCape C1 and C2b 2026-08-23 13:24:55 +02:00
WORK-RECORDS.md Refresh work-record index 2026-08-29 02:45:20 +02:00

README.md

NetKingdom

NetKingdom is the canonical security architecture, integration boundary, and bootstrap/reference implementation for NetKingdom environments. It defines identity, tenancy, credential, workload-zone, and security-composition contracts while leaving provider and Railiance execution in their owning repositories.

The dynamic, self-optimizing security platform is the long-term direction in INTENT.md, not a claim about current delivery.

Orientation

  • SCOPE.md — what this repo owns, current state, and when it is relevant
  • Security layer model — how the security estate is layered (Taxonomy / Tooling / Engines / Staff) and what each layer may own
  • Security scenario composition — deterministic, plan-only capability and trust composition
  • Posture feedback — deterministic, proposal-only posture and evidence remediation findings

Security Infrastructure Documents

  • secrets-engine security infrastructure boundary defines how secrets-engine participates in the NetKingdom security infrastructure and how it interacts with OpenBao, flex-auth, user-engine, ops-warden, ops-bridge, info-tech-canon, State Hub, and agents.