tegwick 894761477f MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane ... key-cape confirmed groups_claim=groups, bound group fluid-telegram-operators, assurance aal2 and the three openbao-admin callbacks. The OIDC executor now pins /assurance/level=aal2 (bound_claims_type=string) and accepts the exact operator-tunnel UI callback; the retired public UI callback stays refused. T01 now waits on the founder go for the LLDAP group and a scoped survey grant. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0		2026-10-08 23:41:34 +02:00
..
__init__.py	Review/optimize checklist, executive-summary format, build executor (T02-T04)	2026-07-27 00:56:34 +02:00
audit.py	Review/optimize checklist, executive-summary format, build executor (T02-T04)	2026-07-27 00:56:34 +02:00
cli.py	Enforce readiness tiers and reconcile blocked workplans	2026-09-28 11:40:57 +02:00
executor.py	MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane	2026-10-08 23:41:34 +02:00
kubernetes_plane.py	Enforce readiness tiers and reconcile blocked workplans	2026-09-28 11:40:57 +02:00
plan.py	Bind OpenBao builds to approved inputs and secure credential delivery	2026-09-28 11:55:39 +02:00
readiness.py	Enforce readiness tiers and reconcile blocked workplans	2026-09-28 11:40:57 +02:00