coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

Commit graph

  • 8afcc9c321 chore: refresh Warden work-record indexes main tegwick 2026-09-01 01:27:55 +02:00
  • 529feeac49 repo.work.assign_missing_identifiers repo-manager 2026-09-01 00:51:59 +02:00
  • 9770d6ad66 docs: close Warden credential workplans tegwick 2026-09-01 00:51:52 +02:00
  • 31694ab64d chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-01 00:50:08 +02:00
  • eddb5d426b chore: refresh high-risk credential paths tegwick 2026-09-01 00:47:25 +02:00
  • 4fee839b11 feat: route Policy Nexus source credential tegwick 2026-09-01 00:46:28 +02:00
  • 8f01eefb1e Preserve Warden config in attended child tegwick 2026-09-01 00:24:18 +02:00
  • b4c1d3900a Fix contained OpenBao login handoff tegwick 2026-09-01 00:13:26 +02:00
  • 4e267179db chore(registrar): assign State Hub identifiers repo-manager 2026-08-29 14:56:21 +02:00
  • d18d18e313 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-29 14:56:20 +02:00
  • 2e3ff772f4 Refresh work-record index for WARDEN-WP-0034 tegwick 2026-08-29 14:55:36 +02:00
  • fd08950231 Align INTENT and SCOPE to layer model v0.7; assess gaps; open WARDEN-WP-0034 tegwick 2026-08-29 14:50:55 +02:00
  • 94f32bd160 Review layer model v0.6; publish the PEP stance map §6.4 requires tegwick 2026-08-29 10:20:49 +02:00
  • ec625873fb Review layer model v0.4; correct an unsound audit claim it exposes tegwick 2026-08-29 02:46:50 +02:00
  • f815bb35ca Implement §5.3 machine-readably — layer.yaml, checker, conformance tests tegwick 2026-08-29 02:45:29 +02:00
  • 57d39ede0f Refresh work-record index tegwick 2026-08-28 22:43:06 +02:00
  • f289465b90 repo.work.create_intake WARDEN-IN-0002 repo-manager 2026-08-28 22:40:24 +02:00
  • a45280f30d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-28 22:02:58 +02:00
  • 61c992923c WARDEN-WP-0027-T02: the owner gate closed five days ago tegwick 2026-08-28 22:01:47 +02:00
  • ee94c18938 WARDEN-WP-0033 finished — key-cape accepted the issuance question five days ago tegwick 2026-08-28 22:00:09 +02:00
  • d7f4ebcfe0 Re-emit the high-risk path artifact after the NetKingdom SSO lanes tegwick 2026-08-28 21:55:33 +02:00
  • f766400563 chore(registrar): assign State Hub identifiers repo-manager 2026-08-28 21:52:03 +02:00
  • 70d8b503f0 Assent to the NetKingdom security layer model (WARDEN-IN-0001) tegwick 2026-08-28 21:47:44 +02:00
  • 85d3078bae Refresh work-record index tegwick 2026-08-28 21:35:57 +02:00
  • 467635e84b repo.work.create_intake WARDEN-IN-0001 repo-manager 2026-08-28 21:30:28 +02:00
  • 15730bb650 Point layering note at the published standard tegwick 2026-08-28 21:21:08 +02:00
  • 347e47ce8e Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:43 +02:00
  • 37c387bd34 fix(workplans): qualify archived ad-hoc identifiers tegwick 2026-08-28 00:34:02 +02:00
  • 030362085a fix(workplans): qualify ad-hoc identifiers with the repository prefix tegwick 2026-08-28 00:28:23 +02:00
  • 6e66a56653 fix(routing): state-hub lane uses Kubernetes auth, not an AppRole mason/state-hub-forge-derivation-read tegwick 2026-08-27 22:49:03 +02:00
  • 6294e4b521 chore(registry): regenerate high-risk data paths tegwick 2026-08-26 21:56:55 +02:00
  • 3a4333d850 feat(routing): propose state-hub-forge-derivation-read lane (draft) tegwick 2026-08-26 21:56:44 +02:00
  • 0fc581ffb9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 20:17:24 +02:00
  • 186fa99f58 fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:16:12 +02:00
  • 76e545ecf0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:56:00 +02:00
  • 51e1434cdb fix(workplan): point workplan at its authoritative projection id codex 2026-08-25 17:37:51 +02:00
  • 9087edf673 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:31 +02:00
  • c374d41a49 Add NetKingdom SSO credential routing lanes tegwick 2026-08-23 21:43:12 +02:00
  • c8fa02adf0 docs: advance remaining owner gates tegwick 2026-08-23 11:25:03 +02:00
  • bc1966da82 docs: record attended login containment evidence tegwick 2026-08-23 01:32:59 +02:00
  • 0fae0904ce fix: contain attended OpenBao login output tegwick 2026-08-23 01:31:05 +02:00
  • 461f580813 docs: project remaining WP0027 owner gates tegwick 2026-08-22 23:50:46 +02:00
  • cdb44a8f23 docs: project WP0027 infra review contract tegwick 2026-08-22 22:38:00 +02:00
  • 7fa6985f72 docs: record recovery preparation boundaries tegwick 2026-08-22 22:12:52 +02:00
  • 5ac47520b1 docs: establish attended recovery drill scenario tegwick 2026-08-22 22:00:35 +02:00
  • 2c1fc25e43 test: account for recovery ceremony lane tegwick 2026-08-22 20:58:50 +02:00
  • 8cd10eae17 chore: refresh high-risk route artifact tegwick 2026-08-22 20:55:08 +02:00
  • e3b9b1620c fix: route OpenBao recovery ceremonies safely tegwick 2026-08-22 20:54:45 +02:00
  • fff76ef089 docs: activate credential break-glass planning tegwick 2026-08-22 20:36:49 +02:00
  • 5c2368ad42 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 20:24:17 +02:00
  • 72a3c0b6e2 chore(registrar): assign State Hub identifiers repo-manager 2026-08-22 19:09:26 +02:00
  • 145e31034e chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 19:09:25 +02:00
  • 8280c0b7b7 fix: route OpenBao platform administration login tegwick 2026-08-22 19:08:21 +02:00
  • e24d2d5bd0 docs: record live zone config migration tegwick 2026-08-22 15:50:42 +02:00
  • bebcdf929c docs: assess security zone workplan DoD tegwick 2026-08-22 15:42:23 +02:00
  • 59d426b87b chore(consistency): sync completed zone task tegwick 2026-08-22 15:40:41 +02:00
  • 4143d1d8da chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 15:40:33 +02:00
  • 6604ace982 chore: refresh generated security inputs tegwick 2026-08-22 15:37:33 +02:00
  • 7ce58ae638 feat: adopt security zones and explicit workload refs tegwick 2026-08-22 15:36:37 +02:00
  • 12c637cbf2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 12:42:42 +02:00
  • e18894ee5b Scale the blocker window by lane risk, converging with risk-nexus tegwick 2026-08-21 13:29:29 +02:00
  • 55f0f47a02 WARDEN-WP-0033-T05: split the stale cadences, and record how a blocker was verified tegwick 2026-08-21 13:26:10 +02:00
  • a565e62b2f Regenerate the artifact; correct the test that classified openbao-api-key as a gap tegwick 2026-08-21 09:06:08 +02:00
  • 675e04e8e6 Correct the delegation register after secrets-engine's SECRETS-WP-0006 answer tegwick 2026-08-21 09:04:54 +02:00
  • b30626edcf chore(consistency): regenerate WORK-RECORDS.md tegwick 2026-08-21 08:41:22 +02:00
  • 6cd969dda9 WARDEN-WP-0033-T04: route the coding-agent issuance identity to key-cape tegwick 2026-08-21 08:39:10 +02:00
  • 6e1d5201aa WARDEN-WP-0033-T03: emit the high-risk data-path artifact tegwick 2026-08-21 08:38:13 +02:00
  • c357ce5908 WARDEN-WP-0033 T01/T02: two under-graded lanes, and ADR-0008 tegwick 2026-08-21 08:36:42 +02:00
  • 9b7e2e9bd2 Open WARDEN-WP-0033 — native lane handoff tegwick 2026-08-21 08:30:19 +02:00
  • 06d0a1e690 Reframe the secrets-engine blocker on seven interim lanes tegwick 2026-08-21 01:26:07 +02:00
  • 0dafb53e84 WARDEN-WP-0032-T06: record the live verification, and that the blocker was stale tegwick 2026-08-21 00:50:45 +02:00
  • edb587851c Verify the OpenBao read-boundary live; ship the invariant tegwick 2026-08-21 00:50:00 +02:00
  • 801bbe7b35 chore(consistency): regenerate WORK-RECORDS.md tegwick 2026-08-21 00:45:49 +02:00
  • 1cd71e74d7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-21 00:45:34 +02:00
  • 9ed8b452a1 Refresh the activity-core issue-sink lane; close WP-0032-T01 tegwick 2026-08-21 00:43:42 +02:00
  • 72f7dc2c5d Add scripts/report_workload_join.py — measure the lane-to-workload join tegwick 2026-08-20 07:22:07 +02:00
  • 50e185ed7b Check the OpenBao half of the read-boundary; route RISK-F-0004 tegwick 2026-08-20 07:11:03 +02:00
  • 9fc5a735c6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-20 01:14:31 +02:00
  • d0d4f9d8fc Make the risk grade fail safe, and gate CI on absence tegwick 2026-08-20 01:13:35 +02:00
  • ac85259c20 Grade every catalog lane; record ADR-0007 tegwick 2026-08-19 23:44:58 +02:00
  • 7b8dd3467b WARDEN-WP-0032: grade the exposed lanes now, structural fix after the model tegwick 2026-08-19 23:24:34 +02:00
  • f528c1df31 Declare ops-warden's tenancy posture tegwick 2026-08-19 22:20:44 +02:00
  • 9008ded1b0 WARDEN-WP-0032: net-kingdom amendment — carrier file settled, organization_posture answered tegwick 2026-08-19 22:06:39 +02:00
  • b1070be644 WARDEN-WP-0032: flex-auth amendments to T02 and T03 tegwick 2026-08-19 22:00:13 +02:00
  • 5e2f7dc939 chore(consistency): sync WP-0032 hub ids [auto] tegwick 2026-08-19 21:22:59 +02:00
  • 8c58f8bfa1 Hand the zone model to zone-engine; keep WP-0032 as the consumer side tegwick 2026-08-19 21:20:34 +02:00
  • b845f4b51e Draft WARDEN-WP-0032 properly — security zones, ownership question first tegwick 2026-08-19 20:38:25 +02:00
  • 3d968bb993 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 20:32:22 +02:00
  • cbf6828061 ADR-0006: enforcement is zone-scoped; defer the policy.enabled flip tegwick 2026-08-19 20:31:28 +02:00
  • 661176e37a Retire CoulombCore references; correct the 16443 diagnosis tegwick 2026-08-19 19:31:41 +02:00
  • e22f9b3434 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 19:07:27 +02:00
  • 654c05dece WARDEN-WP-0031 T04: prove ops-warden's caller identity against the live pin tegwick 2026-08-19 19:06:04 +02:00
  • 9b9bfe565a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 15:10:03 +02:00
  • 0a331413a2 Send a caller identity to flex-auth so policy.enabled can flip tegwick 2026-08-19 15:08:34 +02:00
  • 35aff380a3 Lift ops-warden's binding rules into owned ADRs tegwick 2026-08-18 13:35:13 +02:00
  • faa4f2c23e chore(consistency): register ADHOC-2026-08-17, refresh WORK-RECORDS [auto] tegwick 2026-08-18 13:25:31 +02:00
  • 683f22d986 Adopt risk-nexus finding routing; record the ADR gap policy-nexus exposes tegwick 2026-08-18 13:04:50 +02:00
  • 3447687bbc Answer flex-auth caller-auth question; refresh two delegation lanes tegwick 2026-08-17 22:55:33 +02:00
  • 263b919c17 Refresh WORK-RECORDS for finished WARDEN-WP-0030 tegwick 2026-08-15 20:56:51 +02:00
  • c93e3c9b43 Ship WARDEN-WP-0030: delegation register for every catalog lane tegwick 2026-08-15 20:54:58 +02:00