net-kingdom/workplans
tegwick d09843c17e feat(NET-WP-0018-T02): Document The Runtime Architecture
- Created docs/NetkingdomRuntimeArchitecture.md (comprehensive, specific-as-deployed):
  - Planes (bootstrap/control/tenant + recursive trust)
  - Identity/MFA/OIDC (lightweight key-cape: LLDAP/Authelia/privacyIDEA + KeyCape https://kc.coulomb.social; clients, claims, groups)
  - Authelia handoff, OpenBao OIDC+secrets path (SOPS/age -> runtime leases/K8s/audit)
  - Bootstrap console/UI state (S6, gates, 0019 dry-run additions, web-ui, evidence)
  - State Hub relation, k8s/DNS/routes/ingress/trust (concrete hosts/ns)
  - Pragmatic audit paths (local-identity TSV, PVC+mock, State Hub/console)
  - UE integration points + 7 gaps (per assessment + boundary contract refs)
  - Operational assumptions + rebuild notes
- Updated NET-WP-0018 workplan: T02 status done + detailed 2026-06-03 completion note
- Used pragmatic tracking throughout (progress events with task_id 121ee797..., file notes, this commit)
- Per T02 spec + Coordination Notes guidance on pragmatic for impl/retrospect

This doc is now the baseline for T03 retrospective/gap matrix (incl. audit), T05 guide, T06/T08 control surface/validations, T09 risk assessment.
2026-06-03 16:27:22 +02:00
..
archived NET-WP-0017: complete T06 dry-run + T07 review/retire (onboarded+locked+offboarded t06-dryrun test user via T05 flow + verifs; evidence+validate pass; archived superseded 0015/16 + old NK-0003/4/5 bootstrap plans per T07; set platform_reopened; updated T06/T07 notes + frontmatter finished) 2026-06-03 02:01:38 +02:00
NET-WP-0017-it-security-readiness-for-user-onboarding.md NET-WP-0019: register T06-adjacent polish workplan + implement core (orchestrator script, safer secret fallback in create-user, console dry-run + cleanup commands, make targets, cross-link from 0017 T06). See workplan file for task status. 2026-06-03 02:17:55 +02:00
NET-WP-0018-bootstrap-automation-and-rebuild-readiness.md feat(NET-WP-0018-T02): Document The Runtime Architecture 2026-06-03 16:27:22 +02:00
NET-WP-0019-t06-adjacent-user-lifecycle-dry-run-polish.md docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it. 2026-06-03 10:33:31 +02:00
NK-WP-0001-sso-mfa-platform.md Register NK-WP-0011 in State Hub; archive NK-WP-0001 2026-05-21 00:07:06 +02:00
NK-WP-0002-local-identity.md feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03) 2026-03-05 09:22:13 +01:00
NK-WP-0006-recursive-platform-identity-security-architecture.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0007-object-storage-sts-credential-vending.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0008-it-security-architecture-patterns-infospace.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0009-netkingdom-security-pattern-tutorials.md Add security architecture workplans 2026-05-17 14:17:55 +02:00
NK-WP-0010-genesis-security-pattern-completion.md Add NK-WP-0010 genesis pattern completion plan 2026-05-19 07:12:08 +02:00
NK-WP-0011-enterprise-federation-saml.md Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
NK-WP-0012-iam-profile-specification.md Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
NK-WP-0013-playbook-capability-contract.md Implement NK-WP-0013 playbook capability contract 2026-05-22 14:49:25 +02:00
NK-WP-0014-user-engine-preparation-boundary-contracts.md Complete user-engine boundary contracts 2026-05-22 22:26:36 +02:00