tegwick d16db30282 Pin bind-env full local source closure (NK48-R2-F3) ... bind-env's source_digest covered bind-env-adapter.py and keycape-client.py only, but keycape-client.py executes portal-client-rollout.py, which executes openbao-client-config.py and register-user-engine-portal.py. Pin the same five-file closure the registration adapter pins, and add a closure-completeness test that imports every *-adapter.py in a fresh interpreter and fails on any loaded local file its SOURCE_FILES omits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 903097@bnt-lap001 Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23		2026-10-17 11:07:33 +02:00
..
bootstrap	fix(identity): retain group provenance and prepare sealed recovery custody	2026-10-17 00:28:17 +02:00
k8s	Pin bind-env full local source closure (NK48-R2-F3)	2026-10-17 11:07:33 +02:00
WORKPLAN.md	security: repair LDAP group callers and fail incomplete T07 acceptance	2026-10-14 01:17:35 +02:00