tegwick ca03da52c6 NK-WP-0054-T02: draft-2 of the Service Identity and Privilege standard after the founder's review ... Applied the founder's four decisions: OpenBao platform-admin binds aal2 (SI-8 MUST); the human administrator keeps directory admin rights through an admin group (SI-5); declarations start in this repository and move to the services; agents get their own class and rule SI-14. Finding F-1: the coding-agent role presents as a service against IAM Profile v0.3. Schema, validator and tests follow (37 pass). Rehearsals listed, not decided. Not ratified; owner review still open. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 328925@bnt-lap001 Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed		2026-10-24 22:50:01 +02:00
..
bootstrap-recovery	NK-WP-0049-T19: done; founder ran the isolated existing-token MFA check on the actual backup	2026-10-24 18:49:33 +02:00
coordination-frame	build: derive coordination receiver from staged owner sources	2026-10-19 13:44:36 +02:00
custody-record	Advance approved custody delivery and expose observation expiry	2026-10-03 19:27:16 +02:00
emission-cadence-profile	NK-WP-0035-T04: independent receiver readback helper for the retained hourly capture	2026-10-23 06:57:26 +02:00
iam-profile-conformance	Implement NK-WP-0012 IAM profile specification	2026-05-22 14:35:31 +02:00
playbook-capability-contract	feat(orchestration): compose security scenarios	2026-08-23 12:40:52 +02:00
posture-feedback	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
security-bootstrap-console	security: retire unsafe legacy LDAP lifecycle callers	2026-10-14 00:08:42 +02:00
security-case-types	fix(cases): validate optional exact machine descriptor pins	2026-10-16 21:23:04 +02:00
security-scenario-composer	feat(orchestration): compose KeyCape C1 and C2b	2026-08-23 13:24:55 +02:00
service-identity	NK-WP-0054-T02: draft-2 of the Service Identity and Privilege standard after the founder's review	2026-10-24 22:50:01 +02:00
tenancy-posture	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
prepare_forgejo_type12_acknowledgment.py	Prepare reviewed Forgejo type 1.2 source decision package	2026-10-11 04:48:34 +02:00
sync-user-engine-delivery-secret.sh	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
validate_forgejo_type12_acknowledgment.py	Prepare reviewed Forgejo type 1.2 source decision package	2026-10-11 04:48:34 +02:00