coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 3c69a25442 MASON-WP-0010-T01: review oidc-service-client 0.1 materialization (acceptable with changes) main tegwick 2026-10-31 23:02:47 +01:00
  • 827781f318 MASON-WP-0015: accept a can-i denial as negative-scope proof tegwick 2026-10-22 09:41:16 +02:00
  • c8b3e062cc MASON-WP-0015-T06: record the profile builder identity tegwick 2026-10-22 09:11:50 +02:00
  • d2d27c6c2e MASON-IN-0008: record the State Hub intake id tegwick 2026-10-22 08:59:40 +02:00
  • 57773aa8a2 MASON-WP-0015-T06: apply as the scoped ops-mason-builder identity tegwick 2026-10-22 08:58:21 +02:00
  • ede8aee129 MASON-WP-0015-T06: record founder choice (b) for the kube identity tegwick 2026-10-22 08:28:06 +02:00
  • 0f183d509f MASON-WP-0015: accept a synced decision and the standard-lane token bounds tegwick 2026-10-22 02:15:24 +02:00
  • 9b705ec62c MASON-WP-0015: gate CCR evidence and qualify the kube wait tegwick 2026-10-22 01:59:49 +02:00
  • 4e46aa3b4f MASON-WP-0013-T03: record the resolved founder decision tegwick 2026-10-22 00:39:49 +02:00
  • 7af68f2af4 MASON-WP-0013-T04: cite the reader-scope denial journal tegwick 2026-10-22 00:35:58 +02:00
  • a35d388c63 MASON-WP-0013-T04: note the MAS reply is not the denial receipt tegwick 2026-10-22 00:31:45 +02:00
  • 9b608cd735 MASON-WP-0013-T04: wait for the reader denial receipt tegwick 2026-10-22 00:28:58 +02:00
  • dee677f226 MASON-WP-0013: record the survey, CCR, and founder decision tegwick 2026-10-22 00:24:00 +02:00
  • ca5e98d4e4 Route the missing ops-mason-survey grant to a founder decision tegwick 2026-10-22 00:08:06 +02:00
  • 78a31e1444 MASON-WP-0014: record MAS sync evidence and teardown intake tegwick 2026-10-22 00:02:06 +02:00
  • 0a489116a8 build: keep generated orientation brief local and untracked tegwick 2026-10-19 13:44:08 +02:00
  • 3457ecfb52 build: adopt staged indexes and retain validated dependency lock tegwick 2026-10-19 13:15:43 +02:00
  • eb3d7047ad MASON-WP-0014: reference hub decision e633607e for the approval tegwick 2026-10-18 12:57:56 +02:00
  • 08d18e52fe Record the State Hub id for MASON-IN-0006. tegwick 2026-10-18 12:57:08 +02:00
  • 0a379cc209 MASON-WP-0015-T06: agent kubeconfig is cluster-admin (MASON-IN-0006) tegwick 2026-10-18 12:56:03 +02:00
  • 91c4e7b527 MASON-WP-0015-T04: structure-only AppRole build, post-build policy check tegwick 2026-10-18 12:52:57 +02:00
  • d19e6b1633 MASON-WP-0014-T03: MAS TEM lane built under ops-mason-construct tegwick 2026-10-18 12:44:51 +02:00
  • c4b887940a MASON-WP-0014: founder approved the MAS TEM lane plan (2026-10-18) tegwick 2026-10-18 12:40:49 +02:00
  • 6cbb7de92f Record the State Hub id for MASON-WP-0015-T07. tegwick 2026-10-18 12:31:41 +02:00
  • 7b553bea25 MASON-WP-0015-T07: track CCR submission from plans (RPF-WP-0061) tegwick 2026-10-18 12:30:47 +02:00
  • 2f7237fe01 MASON-WP-0014: record CCR-2026-0051 tegwick 2026-10-18 12:26:14 +02:00
  • e850cbfeff MASON-WP-0014: executive summary for founder decision tegwick 2026-10-18 12:15:56 +02:00
  • 9ef2a7031e MASON-WP-0014-T02: live survey; MAS TEM plan reviewed tegwick 2026-10-18 12:14:46 +02:00
  • e5b72a6b30 MASON-WP-0015-T02/T03: construct grant installed and probed; Scaleway placeholders created tegwick 2026-10-18 12:04:12 +02:00
  • 482a08b40e MASON-WP-0015-T03: deny comma-string token_policies in ops-mason-construct tegwick 2026-10-18 11:59:04 +02:00
  • ea847816ad Record State Hub ids for MASON-WP-0015 and MASON-IN-0005; T05 owners notified tegwick 2026-10-18 11:49:46 +02:00
  • e7a368af0f MASON-IN-0005: restore ops-mason as the OpenBao builder (ops-mason-construct) tegwick 2026-10-18 11:48:27 +02:00
  • e2ac6448c2 Add placeholder script for Scaleway supplier KV entries tegwick 2026-10-18 11:37:06 +02:00
  • 22dfb810fb MASON-WP-0014: move TEM credential to platform/suppliers/scaleway/mas-tem-relay tegwick 2026-10-18 11:33:24 +02:00
  • 8b38d3b9db Record the State Hub ids for MASON-WP-0014-mas-tem-relay-smtp.md. tegwick 2026-10-18 11:27:40 +02:00
  • 5f52d2f42f MASON-WP-0014-T01: draft MAS TEM SMTP relay construction plan tegwick 2026-10-18 11:26:18 +02:00
  • 9121961444 Record State Hub ids for MASON-WP-0013 and refresh brief/work records tegwick 2026-10-18 11:24:59 +02:00
  • 20b92e2d46 MASON-WP-0010-T03: source review complete; attended owner checklist tegwick 2026-10-17 04:31:10 +02:00
  • 57411f25b9 fix(cases): expose explicit versioned type roots in Mason CLI tegwick 2026-10-16 07:51:41 +02:00
  • e4761b843c Accept attended sign-in diagnosis caller proofs tegwick 2026-10-15 19:23:24 +02:00
  • b67b57a022 Prepare seven-repository reuse-surface reader construction revision 2 tegwick 2026-10-15 01:39:47 +02:00
  • 92907919cd Record the State Hub ids for MASON-WP-0012-sign-in-diagnosis-caller-proof.md. tegwick 2026-10-14 23:50:55 +02:00
  • fca5591bc6 MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) tegwick 2026-10-14 23:48:11 +02:00
  • 97d1fed949 Record the passing hub-writer receipts. tegwick 2026-10-14 22:14:32 +02:00
  • 05882b189f Record that CCR-2026-0044 is applied. tegwick 2026-10-14 19:48:44 +02:00
  • 0af5a09e89 The reported uuid is not an OpenBao entity. tegwick 2026-10-14 19:47:25 +02:00
  • a7f9516bb3 Record the hub-writer member entity. tegwick 2026-10-14 19:36:52 +02:00
  • c54193ae24 Record the second factor on bernd.worsch-3. tegwick 2026-10-14 19:24:14 +02:00
  • 100558696f Record bernd.worsch-3 and the group-ensure route. tegwick 2026-10-14 19:05:33 +02:00
  • 58fb21fa65 Point the attended note at filed CCR-2026-0044. tegwick 2026-10-14 18:46:37 +02:00
  • 772e906fad Record CCR-2026-0044 and the founder group step. tegwick 2026-10-14 18:44:56 +02:00
  • 8bd6b249d5 Record MASON-WP-0011 in the State Hub index. tegwick 2026-10-14 18:21:50 +02:00
  • fd2c5a5904 Name a dedicated reuse-surface hub-writer caller. tegwick 2026-10-14 18:19:14 +02:00
  • 6434877a44 docs(reuse): establish reviewed NetKingdom security capabilities tegwick 2026-10-14 06:40:58 +02:00
  • d86ad141be Require the SEC-DSM decision procedure on new credentials. tegwick 2026-10-11 23:41:31 +02:00
  • 5f09c2614f chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 20:31:56 +02:00
  • 0ee1cf96ec Requalify tasks after founder decisions D1/D2/D3 (2026-10-11) tegwick 2026-10-11 20:31:24 +02:00
  • 98dd9ea2e0 Retain reviewed work-record index and synchronization metadata tegwick 2026-10-11 18:45:52 +02:00
  • 969fe218df Prepare independently reviewed native custody capability verification tegwick 2026-10-11 14:16:58 +02:00
  • c52be782d0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 14:01:31 +02:00
  • a36b6100fc Record independent custody verifier review and required corrections tegwick 2026-10-11 14:00:37 +02:00
  • 6196be5dca chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 04:10:46 +02:00
  • a41312e5a4 Prepare reviewed Forgejo consumer ESO scope and truthful recovery records tegwick 2026-10-11 04:09:26 +02:00
  • f52c94cd4e Prepare typed structural evidence without credential success circularity tegwick 2026-10-11 02:42:57 +02:00
  • 247c829569 MASON-WP-0010: mark the missing-role cause as unconfirmed tegwick 2026-10-10 15:51:58 +02:00
  • d1703b360c chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-10 15:51:49 +02:00
  • 45c1b93ef3 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 15:51:48 +02:00
  • 437074dff6 MASON-WP-0009-T05: service-JWT role verified, ops-mason checks complete; pointer proposed tegwick 2026-10-10 15:51:17 +02:00
  • efefb8bbc7 MASON-WP-0009-T05: updated ops-mason-survey installed, hash matches repo file tegwick 2026-10-10 15:45:43 +02:00
  • 28386d3b4c Rebuild Forgejo bundle from type 1.1; draft fluid-telegram custody descriptions tegwick 2026-10-10 15:12:56 +02:00
  • 2ef0101412 WP-0009-T05 invariant (ii) verified; survey policy covers keycape-services roles; Forgejo plan re-rendered tegwick 2026-10-10 14:13:02 +02:00
  • 8f8692a100 MASON-WP-0004-T03: 34 descriptions applied; operators/ metadata write refused (403) tegwick 2026-10-10 14:08:21 +02:00
  • ab17d859cb plan --case: a case's own built objects are not collisions on re-render tegwick 2026-10-10 13:17:22 +02:00
  • 1c07b65a3c MASON-WP-0004-T03: founder accepts six owner-supplied custody descriptions tegwick 2026-10-10 12:59:45 +02:00
  • c9b1cea83b Fix case render self-lifecycle stanzas; record overnight replies tegwick 2026-10-10 12:41:20 +02:00
  • ae403c8402 MASON-WP-0005-T05: tegwick's factor comes through user-engine self-service MFA tegwick 2026-10-10 00:37:08 +02:00
  • bc507455da MASON-WP-0005-T05: member check waits on a TOTP factor for tegwick tegwick 2026-10-10 00:21:08 +02:00
  • 1bea4da92e chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 20:12:37 +02:00
  • 19776ae587 MASON-WP-0005-T05: non-member refusal proven (platform-root refused by the role) tegwick 2026-10-09 20:11:40 +02:00
  • 777f8df707 verify-fluid-telegram-lane: clear message when the member login is refused tegwick 2026-10-09 20:10:43 +02:00
  • b1f6a3dab1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:55:10 +02:00
  • 676a0423d8 chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 19:53:50 +02:00
  • 5db9d80d30 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:53:49 +02:00
  • 3e49ed4c0c MASON-WP-0010-T03: ops-mason build --case; Forgejo case bundle built tegwick 2026-10-09 19:52:33 +02:00
  • a97d1931dd chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 19:48:12 +02:00
  • 27cc9aaee7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:48:08 +02:00
  • cd251f7c2e WP-0005-T05: lane verified from policy and role; owner-run check script; Forgejo case plan rendered tegwick 2026-10-09 19:47:45 +02:00
  • e10bc2b82b chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 19:42:30 +02:00
  • 5397ecb2cd chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:42:29 +02:00
  • a3e97c8bd4 plan --case: explicit reference-case render; WP-0005-T04 done; factor-issuer described tegwick 2026-10-09 19:42:02 +02:00
  • c6eb701c3d chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 19:02:19 +02:00
  • f45107f3df chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:02:18 +02:00
  • 4dafcf5ed4 MASON-WP-0010-T02 done: ops-mason plan --case renders a construction plan from a SecurityCase tegwick 2026-10-09 19:01:28 +02:00
  • 21b5a076f6 chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 15:54:02 +02:00
  • 492b6839b1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 15:54:01 +02:00
  • 930bcadb92 MASON-WP-0007 finished: tenant-engine audit-core sender projection verified tegwick 2026-10-09 15:53:29 +02:00
  • 3e9ed6e862 chore(consistency): refresh WORK-RECORDS after sync tegwick 2026-10-09 14:59:45 +02:00
  • 245a01c7de chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 14:59:44 +02:00
  • 5dc876f566 WP-0007-T06 in progress (tenant-engine ESO synced); WP-0010-T02 unblocked tegwick 2026-10-09 14:59:09 +02:00
  • dc5a71bf07 MASON-WP-0009-T05: CCR-2026-0038 already applied (2026-10-08); waits on login proof tegwick 2026-10-09 14:41:48 +02:00