net-kingdom/docs
tegwick d09843c17e feat(NET-WP-0018-T02): Document The Runtime Architecture
- Created docs/NetkingdomRuntimeArchitecture.md (comprehensive, specific-as-deployed):
  - Planes (bootstrap/control/tenant + recursive trust)
  - Identity/MFA/OIDC (lightweight key-cape: LLDAP/Authelia/privacyIDEA + KeyCape https://kc.coulomb.social; clients, claims, groups)
  - Authelia handoff, OpenBao OIDC+secrets path (SOPS/age -> runtime leases/K8s/audit)
  - Bootstrap console/UI state (S6, gates, 0019 dry-run additions, web-ui, evidence)
  - State Hub relation, k8s/DNS/routes/ingress/trust (concrete hosts/ns)
  - Pragmatic audit paths (local-identity TSV, PVC+mock, State Hub/console)
  - UE integration points + 7 gaps (per assessment + boundary contract refs)
  - Operational assumptions + rebuild notes
- Updated NET-WP-0018 workplan: T02 status done + detailed 2026-06-03 completion note
- Used pragmatic tracking throughout (progress events with task_id 121ee797..., file notes, this commit)
- Per T02 spec + Coordination Notes guidance on pragmatic for impl/retrospect

This doc is now the baseline for T03 retrospective/gap matrix (incl. audit), T05 guide, T06/T08 control surface/validations, T09 risk assessment.
2026-06-03 16:27:22 +02:00
..
adr Implement NK-WP-0013 playbook capability contract 2026-05-22 14:49:25 +02:00
reviews Split user-engine implementation planning 2026-05-22 19:50:12 +02:00
LocalIdentity.md Local Identity OICD bootstrap 2026-05-02 16:58:44 +02:00
NetkingdomRuntimeArchitecture.md feat(NET-WP-0018-T02): Document The Runtime Architecture 2026-06-03 16:27:22 +02:00
object-storage-sts-credential-vending.md Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
platform-identity-security-architecture.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
platform-root-custody.md Guide OpenBao custody ceremony order 2026-05-25 02:02:14 +02:00
princedom-isolation-exploration.md Exploring multi tenancy 2026-05-25 21:47:40 +02:00
responsibility-map.md docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it. 2026-06-03 10:33:31 +02:00
security-bootstrap-age-custody.md bootstrapping guidance ui and missing stuff 2026-05-24 17:04:15 +02:00
security-bootstrap-handover-cleanup.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
security-bootstrap-king-credential-kit.md bootstrapping guidance ui and missing stuff 2026-05-24 17:04:15 +02:00
security-bootstrap-openbao-ceremony-ux.md Guide OpenBao custody ceremony order 2026-05-25 02:02:14 +02:00
security-bootstrap-operator-journey.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
security-bootstrap-related-workplan-review.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
security-bootstrap-use-cases.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
security-bootstrap-user-lifecycle.md openbao king credential bootstrapping 2026-05-24 09:26:02 +02:00
user-engine-interface-guidance.md docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it. 2026-06-03 10:33:31 +02:00
user-engine-netkingdom-integration-assessment.md docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it. 2026-06-03 10:33:31 +02:00