Commit graph

  • 95d31c3177 Review oidc-service-client 0.1 follow-through (canon §8, net-kingdom msg 44400f30) main tegwick 2026-10-31 23:02:15 +01:00
  • c61c0d9bf0 chore(registry): regenerate high-risk data paths for catalog 537d551 tegwick 2026-10-22 08:53:56 +02:00
  • 537d551ef2 Route railiance01 admin kubeconfig through an attended lane tegwick 2026-10-22 08:53:33 +02:00
  • 97c2e3533d Workplan finished: all tasks done after the attended cutover tegwick 2026-10-21 00:02:28 +02:00
  • 90829d5505 SCOPE/docs: WARDEN-WP-0045 per-actor limits; OpenBao via bridge tunnel; editable install tegwick 2026-10-21 00:02:15 +02:00
  • 289b867e33 Record attended completion from the CUST-WP-0073 cutover (2026-10-20) tegwick 2026-10-21 00:01:56 +02:00
  • 317d42bce0 WARDEN-WP-0045: record State Hub ids from fix-consistency tegwick 2026-10-20 13:48:00 +02:00
  • a07c6c729c chore(registry): regenerate high-risk data paths for catalog e62763c tegwick 2026-10-20 13:46:44 +02:00
  • e62763cba9 WARDEN-WP-0045: agt-custodian issuance profile (CUST-WP-0073-T02) tegwick 2026-10-20 13:46:28 +02:00
  • 8c265c702b chore: keep generated orientation brief local tegwick 2026-10-19 13:50:26 +02:00
  • 6ed0e9ef94 build: adopt staged work-record generation tegwick 2026-10-19 13:15:47 +02:00
  • 08c098e64a Keep original case provenance while revalidating a fresh caller session tegwick 2026-10-18 11:32:19 +02:00
  • b593c87983 test: isolate ordinary unit runs from ambient credentials and provider I/O tegwick 2026-10-17 21:30:12 +02:00
  • 922c26da0f repo.work.assign_missing_identifiers repo-manager 2026-10-17 20:40:08 +02:00
  • ae7bc73b4f fix(case): preserve attended authority at dispatch and validate session lanes tegwick 2026-10-17 20:31:16 +02:00
  • 5abde81777 test(case): integrate the real net-kingdom 1.3 candidate with this kernel and catalog tegwick 2026-10-17 12:17:48 +02:00
  • 0a1e9907bb chore(registry): regenerate high-risk data paths for catalog 207d29e tegwick 2026-10-17 12:13:49 +02:00
  • 207d29e8d1 feat(case): attended-change lane kind with session_lane; grade apps-consumer-handover high tegwick 2026-10-17 12:13:49 +02:00
  • 69fdba2907 chore(registry): regenerate high-risk data paths for catalog a14376c tegwick 2026-10-17 12:08:52 +02:00
  • a14376cf62 feat(case): KERNEL-2/3 lane resolution and mode-aware admission; CATALOG-1 draft lanes tegwick 2026-10-17 12:08:49 +02:00
  • 117fec9241 fix(case): validate original intent and bind its running receipt tegwick 2026-10-17 10:33:43 +02:00
  • a45cf475bc WARDEN-WP-0044-T03: original-intent lookup/context for owner reconciliation tegwick 2026-10-17 04:32:50 +02:00
  • d97652a3bb fix(cases): admit reviewed descriptor pin validator revision tegwick 2026-10-16 21:35:04 +02:00
  • d79f065955 Route explicit attended OpenBao administration to governed login tegwick 2026-10-16 18:44:02 +02:00
  • 958352089b fix(cases): validate browser metadata against pinned owner source tegwick 2026-10-16 01:58:20 +02:00
  • d2cd3fa940 fix: contain attended login diagnostics and OpenBao recovery tegwick 2026-10-15 04:25:05 +02:00
  • 1baeb0821c chore: regenerate high-risk-data-paths artifact (catalog revision metadata only) tegwick 2026-10-14 22:20:20 +02:00
  • 402b008986 Name the verified reuse-surface hub-writer login tegwick 2026-10-14 22:20:15 +02:00
  • 638cc9233b chore: regenerate high-risk-data-paths artifact (catalog revision metadata only) tegwick 2026-10-14 18:46:40 +02:00
  • e73c72e70d chore: regenerate high-risk-data-paths artifact (catalog revision metadata only) tegwick 2026-10-14 18:46:11 +02:00
  • 0a1c24ad23 chore: regenerate high-risk-data-paths artifact (catalog revision metadata only) tegwick 2026-10-14 18:21:30 +02:00
  • 8dbf62515a Show the OpenBao identity warden access evaluates tegwick 2026-10-14 18:21:02 +02:00
  • 6e1430073c WARDEN-WP-0036: tighten attended-login stdout/stderr allowlist tegwick 2026-10-14 12:41:43 +02:00
  • 8a426fba69 chore: regenerate high-risk-data-paths artifact (catalog revision metadata only) tegwick 2026-10-14 12:34:44 +02:00
  • 244f1ae2ca WARDEN-WP-0036: restore fail-closed on non-allowlisted attended-login output tegwick 2026-10-14 12:34:40 +02:00
  • 11b2a9d7bc docs(reuse): establish reviewed NetKingdom security capabilities tegwick 2026-10-14 06:41:08 +02:00
  • 6d2f1be969 Route lanes inside the SEC-DSM preference hierarchy. tegwick 2026-10-11 23:41:31 +02:00
  • 795a42283b Sync work-record index after triage tegwick 2026-10-11 20:37:13 +02:00
  • 37d64a6a81 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 20:37:12 +02:00
  • c80d4d1e81 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-10-11 20:37:01 +02:00
  • 2c4616a2ca chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-10-11 20:37:00 +02:00
  • c812d45bf8 Demote off-critical-path workplans to residual/backlog (2026-10-11 triage) tegwick 2026-10-11 20:36:28 +02:00
  • c0b2b683d8 Sync work-record index after task requalification tegwick 2026-10-11 20:34:34 +02:00
  • 1332440de8 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 20:32:41 +02:00
  • 237891fc9b Requalify tasks after founder decisions D1/D2/D3 (2026-10-11) tegwick 2026-10-11 20:31:57 +02:00
  • 888d4f424c Retain reviewed work-record index and synchronization metadata tegwick 2026-10-11 18:45:52 +02:00
  • eaabb42161 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 02:21:19 +02:00
  • 1b8261917e Prepare reviewed durable case execution kernel and accepted layer pins tegwick 2026-10-11 02:21:03 +02:00
  • 3eb648846e chore: regenerate WORK-RECORDS tegwick 2026-10-10 15:31:58 +02:00
  • 1502830c6d chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 15:31:57 +02:00
  • 8f4657c2a3 chore: regenerate high-risk data paths tegwick 2026-10-10 15:29:31 +02:00
  • 5129358b0a audit-core-senders: rotation guidance pointing at audit-core's overlap-first procedure tegwick 2026-10-10 15:29:31 +02:00
  • 5c165325f9 chore: regenerate high-risk data paths tegwick 2026-10-10 15:26:38 +02:00
  • b76ee0edae Close WARDEN-WP-0039 with fetch-pin receipts; activate audit-core-senders pointer tegwick 2026-10-10 15:26:38 +02:00
  • 9fd65ec4b5 chore: regenerate high-risk data paths tegwick 2026-10-10 13:23:14 +02:00
  • e70dfa6d02 Routing: named client rotation outranks keycape-client-secret-generate tegwick 2026-10-10 13:23:13 +02:00
  • 1f3ecf5d49 chore: regenerate high-risk data paths tegwick 2026-10-10 13:16:49 +02:00
  • 64142527a7 Activate keycape-client-secret-generate (RPF-WP-0054 done) tegwick 2026-10-10 13:16:48 +02:00
  • 7d1b5d4b67 chore: regenerate high-risk data paths tegwick 2026-10-10 12:42:57 +02:00
  • a60dab2aab keycape-client-secret-generate: issuer-role login step and T05 probe evidence; stays draft tegwick 2026-10-10 12:42:57 +02:00
  • 4e271f5bee WARDEN-WP-0044-T03: note keycape-client-secret-generate catalogued as draft tegwick 2026-10-10 10:25:51 +02:00
  • ef89fb0ca2 chore: regenerate high-risk data paths for keycape-client-secret-generate tegwick 2026-10-10 10:24:52 +02:00
  • 0ae8a0e467 Catalog keycape-client-secret-generate as draft (RPF-WP-0054) tegwick 2026-10-10 10:24:51 +02:00
  • 919b9ab3e5 WARDEN-WP-0044-T03: record the agreed broker generate contract tegwick 2026-10-09 20:01:26 +02:00
  • e1a6f2e7f7 chore: regenerate high-risk data paths for fluid-telegram-operator tegwick 2026-10-09 19:59:49 +02:00
  • 23ba584ccd Catalog fluid-telegram-operator (draft) and tenant-engine sender projection; case plan env spec and case-ref tegwick 2026-10-09 19:59:49 +02:00
  • 330de7b5ac chore: regenerate WORK-RECORDS (WP-0043 finished) tegwick 2026-10-09 19:46:38 +02:00
  • 143299796a chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:46:34 +02:00
  • 4c7ae86f68 WARDEN-WP-0043-T03: IONOS supplier values provisioned; WP-0043 finished tegwick 2026-10-09 19:45:55 +02:00
  • d3bd33e62c chore: regenerate WORK-RECORDS (WP-0043-T03 progress) tegwick 2026-10-09 19:32:36 +02:00
  • 50b873af95 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:32:32 +02:00
  • 6ae014288a WARDEN-WP-0043-T03: IONOS supplier stub created at platform/suppliers/ionos/main tegwick 2026-10-09 19:31:52 +02:00
  • 45e8293996 chore: regenerate WORK-RECORDS (WP-0044-T01/T02, WP-0043-T02 done) tegwick 2026-10-09 14:47:38 +02:00
  • baa12df7be chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 14:46:52 +02:00
  • 9a85405e7a WARDEN-WP-0044-T02: warden case plan; close WP-0044-T01 and WP-0043-T02 tegwick 2026-10-09 14:46:17 +02:00
  • 6258d73732 WARDEN-WP-0044-T01: R8, ensure-groups has no caller-identity path tegwick 2026-10-09 10:58:16 +02:00
  • 0e7ceb8c06 WARDEN-WP-0044-T01: warden case check-type; revised oidc-rp 1.0 type conforms tegwick 2026-10-09 00:25:11 +02:00
  • 98cb0bc24a WARDEN-WP-0044-T01: withdraw R4, agree per-case keycape-client entries with templated body tegwick 2026-10-09 00:14:28 +02:00
  • b6b9b95616 WARDEN-WP-0040-T02: compile activity-core's backup-daily declaration tegwick 2026-10-09 00:13:47 +02:00
  • e187b74593 WARDEN-WP-0040: record founder confirmation of atm-backup-daily owner tegwick 2026-10-08 23:49:00 +02:00
  • 9618463f82 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 23:41:29 +02:00
  • de6731bb0d WARDEN-WP-0040: record railiance-platform's atm-backup-daily handoff to activity-core tegwick 2026-10-08 23:40:50 +02:00
  • 51c154a7c3 chore: refresh WORK-RECORDS for WP-0043/0044 status tegwick 2026-10-08 23:26:35 +02:00
  • ab13d908c4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 23:26:26 +02:00
  • d470f2e5a7 Add platform-supplier-credentials pointer and review the OIDC RP follow-through tegwick 2026-10-08 23:25:22 +02:00
  • 139f77dd55 Route OpenBao configuration and provisioning away from the structure survey tegwick 2026-10-08 23:21:46 +02:00
  • 4d912276e4 chore(consistency): record State Hub IDs for WARDEN-WP-0044 tegwick 2026-10-08 22:19:57 +02:00
  • a8d09c9cf2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 22:19:06 +02:00
  • b481c9f690 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-10-08 22:18:55 +02:00
  • ff9d2e7ae9 Add WARDEN-WP-0044: follow through on KnownSecurityCases tegwick 2026-10-08 22:17:03 +02:00
  • fdc0c610cc Record WARDEN-WP-0043 hub ids in the workplan and index tegwick 2026-10-08 19:36:37 +02:00
  • 8c373e5ea6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 19:36:12 +02:00
  • 3596e079b1 Add WARDEN-WP-0043 for supplier credentials under platform/suppliers tegwick 2026-10-08 19:35:00 +02:00
  • fe205b57db Regenerate high-risk path artifact for inbound-library-imap-approle tegwick 2026-10-05 16:13:52 +02:00
  • 9084581461 Route inbound-library-imap-approle (ILIB-WP-0003-T05). tegwick 2026-10-05 16:12:48 +02:00
  • 91261fdb17 repo.work.assign_missing_identifiers repo-manager 2026-10-05 13:22:49 +02:00
  • c9e72030d9 WARDEN-WP-0042: regenerate high-risk path artifact for openbao-structure-survey tegwick 2026-10-05 13:21:23 +02:00
  • a53a55a980 WARDEN-WP-0042: route the OpenBao structure survey to ops-mason tegwick 2026-10-05 13:21:22 +02:00
  • a3555498dd Verify offline scaffolds and preserve Forge qualifier receiving tegwick 2026-10-04 02:32:36 +02:00
  • dfe436e4e0 Implement offline catalog lane scaffold generation tegwick 2026-10-04 02:24:40 +02:00