net-kingdom/workplans
tegwick 875e50d573 NET-WP-0018 T09: Assess scratch-rebuild risk and define rehearsal plan
- Created docs/security-bootstrap-rebuild-risk-and-rehearsal.md (risk table 12+ items classified likelihood/impact/etc; UE adapters #1 HIGH per assessment 7 gaps; non-destructive rehearsal plan: scripted dry (creds-init --dry + 0019 orchestrator + make/console validate + T07/T08) then ns-isolated then parallel; rollback via cleanup/lock-offboard; prove via validators/evidence/status/tests; recs + coverage gaps documented; refs T02/T03/T05/T07/T08/0019/assessment/contract)
- Updated workplan T09 status:done + detailed 2026-06-04 completion note (reviews all prior T0x + live console/evidence/metadata exercised in T09; pragmatic infra used; 9/9 closes 0018)
- Frontmatter updated date
- No destructive; all per session protocol + pragmatic audit (file source per ADR-001)
- T07 tests + T08 validate-keycape + validate-onboarding-dry-run exercised OK as part of review

Refs: workstream 800f9f16-..., task a9e60fd5-...; will POST /progress/ + fix-consistency
2026-06-04 00:50:18 +02:00
..
archived NET-WP-0017: complete T06 dry-run + T07 review/retire (onboarded+locked+offboarded t06-dryrun test user via T05 flow + verifs; evidence+validate pass; archived superseded 0015/16 + old NK-0003/4/5 bootstrap plans per T07; set platform_reopened; updated T06/T07 notes + frontmatter finished) 2026-06-03 02:01:38 +02:00
NET-WP-0017-it-security-readiness-for-user-onboarding.md NET-WP-0019: register T06-adjacent polish workplan + implement core (orchestrator script, safer secret fallback in create-user, console dry-run + cleanup commands, make targets, cross-link from 0017 T06). See workplan file for task status. 2026-06-03 02:17:55 +02:00
NET-WP-0018-bootstrap-automation-and-rebuild-readiness.md NET-WP-0018 T09: Assess scratch-rebuild risk and define rehearsal plan 2026-06-04 00:50:18 +02:00
NET-WP-0019-t06-adjacent-user-lifecycle-dry-run-polish.md docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it. 2026-06-03 10:33:31 +02:00
NK-WP-0001-sso-mfa-platform.md Register NK-WP-0011 in State Hub; archive NK-WP-0001 2026-05-21 00:07:06 +02:00
NK-WP-0002-local-identity.md feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03) 2026-03-05 09:22:13 +01:00
NK-WP-0006-recursive-platform-identity-security-architecture.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0007-object-storage-sts-credential-vending.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0008-it-security-architecture-patterns-infospace.md Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008 2026-05-20 22:51:20 +02:00
NK-WP-0009-netkingdom-security-pattern-tutorials.md Add security architecture workplans 2026-05-17 14:17:55 +02:00
NK-WP-0010-genesis-security-pattern-completion.md Add NK-WP-0010 genesis pattern completion plan 2026-05-19 07:12:08 +02:00
NK-WP-0011-enterprise-federation-saml.md Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
NK-WP-0012-iam-profile-specification.md Implement NK-WP-0012 IAM profile specification 2026-05-22 14:35:31 +02:00
NK-WP-0013-playbook-capability-contract.md Implement NK-WP-0013 playbook capability contract 2026-05-22 14:49:25 +02:00
NK-WP-0014-user-engine-preparation-boundary-contracts.md Complete user-engine boundary contracts 2026-05-22 22:26:36 +02:00