net-kingdom/sso-mfa
tegwick 098c2c7810 NK-WP-0054-T05: live LLDAP bind split passed (2026-10-30); runbook setup fixes
Founder-run steps 1-10, verify --old-admin-retired pass. Evidence and deviations in
docs/evidence/2026-10-30-nk54-bind-split/. Runbook: export the admin KUBECONFIG and
decrypt the sealed custody copy first. Finding: custody AUTHELIA_KEYCAPE_CLIENT_SECRET
is stale against the live hash.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 620478@bnt-lap001
Assistant-Session: 944e8353-7102-4bc8-affe-84586a10f2d0
2026-10-30 19:54:33 +01:00
..
bootstrap NK-WP-0054-T05 phase 3a: founder-run bind-split helper with end-to-end test 2026-10-29 22:00:49 +01:00
k8s NK-WP-0054-T05: live LLDAP bind split passed (2026-10-30); runbook setup fixes 2026-10-30 19:54:33 +01:00
WORKPLAN.md security: repair LDAP group callers and fail incomplete T07 acceptance 2026-10-14 01:17:35 +02:00