coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
net-kingdom/workplans/archived/260702-ADHOC-2026-06-14.md
tegwick bb7daf0f83
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details
CUST-WP-0055 T07: add archive workplan terminology grandfather note
2026-07-08 20:26:36 +02:00

1.2 KiB
Raw Blame History

id type title domain repo status owner topic_slug created updated state_hub_workstream_id
ADHOC-2026-06-14 workplan Ad hoc NetKingdom operator usability fixes netkingdom net-kingdom finished codex netkingdom 2026-06-14 2026-06-14 c6f3d6bf-4916-490d-96ce-092d2776d7e7

Terminology note: Historical text in this archived workplan may use the legacy term "workstream". The fleet term is workplan (canon/standards/workplan-terminology-fleet_v0.1.md).

Ad hoc NetKingdom operator usability fixes

SOPS Custody Unlock Helper

id: ADHOC-2026-06-14-T01
status: done
priority: medium
state_hub_task_id: "bb5973d8-8e61-48f6-b627-a662f8a34ad1"

Added a custody unlock helper for SOPS/age operations so drills and incident commands can use the password-safe/offline custody age private key without installing it permanently on a workstation.

The helper validates the supplied private key against the expected public age recipient, writes a temporary 0600 SOPS_AGE_KEY_FILE, runs the requested command or opens an incident shell, and removes the temporary key on exit.

Documented the inter-hub recovery-drill path:

make sops-custody-run COMMAND='make -C /home/worsch/inter-hub recovery-drill'