tegwick 074b3a047b NK-WP-0048-T05: fold ops-mason's materialization review into oidc-browser-relying-party ... Derive custody at platform/workloads/keycape/{client_id} (secret_ref is no longer case-settable), reuse the workload-kv-read-keycape-* policy family with templated bodies, add the external-secrets-keycape-{client_id} ESO role, name the catalog entry {consuming_service}-keycape-client and collapse the duplicate KV-path rollback. Schema and validator require a body on policy/role items. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 330051@bnt-lap001 Assistant-Session: b98d4912-95a3-4619-b7fb-57aa1db7407b		2026-10-08 23:27:22 +02:00
..
custody-record	Advance approved custody delivery and expose observation expiry	2026-10-03 19:27:16 +02:00
emission-cadence-profile	Accept source cadence migrations and retain operational adoption gates	2026-10-03 22:48:58 +02:00
iam-profile-conformance	Implement NK-WP-0012 IAM profile specification	2026-05-22 14:35:31 +02:00
playbook-capability-contract	feat(orchestration): compose security scenarios	2026-08-23 12:40:52 +02:00
posture-feedback	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
security-bootstrap-console	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof	2026-07-02 22:08:33 +02:00
security-case-types	NK-WP-0048-T05: fold ops-mason's materialization review into oidc-browser-relying-party	2026-10-08 23:27:22 +02:00
security-scenario-composer	feat(orchestration): compose KeyCape C1 and C2b	2026-08-23 13:24:55 +02:00
tenancy-posture	feat(posture): add deterministic feedback proposals	2026-08-23 13:16:34 +02:00
sync-user-engine-delivery-secret.sh	Deploy scoped user-engine delivery lanes	2026-08-13 17:34:29 +02:00