coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
net-kingdom/workplans/archived/260702-ADHOC-2026-06-14.md
tegwick fd86397f52
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
fix(workplans): qualify archived ad-hoc identifiers 
The live-file pass missed these: archived ad-hocs carry a YYMMDD- filename
prefix, so the ADHOC-* glob did not match them. They still derive from the
forge, so they are live records rather than dead files.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
2026-08-28 00:34:01 +02:00

1.1 KiB
Raw Blame History

id type title domain repo status owner topic_slug created updated
NK-WP-ADHOC-2026-06-14 workplan Ad hoc NetKingdom operator usability fixes netkingdom net-kingdom finished codex netkingdom 2026-06-14 2026-06-14

Terminology note: Historical text in this archived workplan may use the legacy term "workstream". The fleet term is workplan (canon/standards/workplan-terminology-fleet_v0.1.md).

Ad hoc NetKingdom operator usability fixes

SOPS Custody Unlock Helper

id: NK-WP-ADHOC-2026-06-14-T01
status: done
priority: medium

Added a custody unlock helper for SOPS/age operations so drills and incident commands can use the password-safe/offline custody age private key without installing it permanently on a workstation.

The helper validates the supplied private key against the expected public age recipient, writes a temporary 0600 SOPS_AGE_KEY_FILE, runs the requested command or opens an incident shell, and removes the temporary key on exit.

Documented the inter-hub recovery-drill path:

make sops-custody-run COMMAND='make -C /home/worsch/inter-hub recovery-drill'