3 commits

Author	SHA1	Message	Date
tegwick	7ce58ae638	feat: adopt security zones and explicit workload refs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1	2026-08-22 15:36:37 +02:00
tegwick	8e9383a33a	feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) ... Add policy.py client that calls flex-auth /v1/check before sign/issue when policy.enabled is true. Record policy_decision_id in signatures.log. Default off preserves existing inventory-only behavior. Document production OpenBao health probe and update config/wiki references.	2026-06-17 08:37:14 +02:00
Bernd Worsch	5ae6b988aa	Initial Commit	2026-03-28 00:45:43 +00:00