coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

Commit graph

  • 7e3e91ec25 Name the founder, not a bare operator, on the WARDEN-WP-0037-T03 hold. main tegwick 2026-09-21 14:06:30 +02:00
  • 39791526a0 Apply GH-DEC-2026-021: identity-value pins, prose citations not reached. tegwick 2026-09-21 13:05:24 +02:00
  • 0f9ada0b0d Give the playbook one reference version detector and a VALIDATED_AGAINST rule. tegwick 2026-09-21 11:32:09 +02:00
  • c23918d6ec Apply GH-DEC-2026-020: checker prints version and scope, A12 r2 by content. tegwick 2026-09-21 09:38:17 +02:00
  • b9151e20da Hold the WARDEN-WP-0037-T03 rotation until secrets-engine moves the lane. tegwick 2026-09-21 07:31:28 +02:00
  • a70c686ac3 Refresh WORK-RECORDS.md after WARDEN-WP-0034-T06 done. tegwick 2026-09-21 06:35:11 +02:00
  • 762749e2e1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 06:34:52 +02:00
  • a70f559d40 Apply GH-DEC-2026-017: INTENT.md governs, the sidecar is derived, no version tegwick 2026-09-21 02:38:55 +02:00
  • 04b3a28aaa chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 02:27:53 +02:00
  • c186a4e135 Record GH-DEC-2026-017 without applying it yet tegwick 2026-09-21 02:26:33 +02:00
  • 284bfd6521 Record GH-DEC-2026-015's narrow R3 permission on the approval page tegwick 2026-09-21 02:21:31 +02:00
  • b4c8be8648 Record hub ids written back by fix-consistency tegwick 2026-09-21 02:18:32 +02:00
  • 233895d213 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 02:18:23 +02:00
  • e9b7f4c852 Pin the generated high-risk path artifact to the committed catalog tegwick 2026-09-21 02:16:38 +02:00
  • baf53602ca Revert the npm field, re-measure coverage, and hold the layer divergence tegwick 2026-09-21 02:16:33 +02:00
  • 15a4717dd1 Point sitting-create at the attended-exec wrapper. tegwick 2026-09-15 22:31:44 +02:00
  • 4e15d725ec Name the sitting-POST child for the sitting-requester login lane. tegwick 2026-09-15 22:25:05 +02:00
  • 5a232b7f97 Attach optional Railiance recording-time evidence tegwick 2026-09-15 22:18:06 +02:00
  • 308409bff1 Add informed-decision-sitting-requester reader login lane. tegwick 2026-09-15 20:38:47 +02:00
  • c8be24b940 Classify open workplans with flavor (CUST-WP-0072). tegwick 2026-09-14 15:50:43 +02:00
  • 8a40dcb11b Draft the flex-auth envelope-signing credential route. tegwick 2026-09-14 09:59:11 +02:00
  • 427105519b chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 04:59:45 +02:00
  • 4ebd241d88 Register the State Hub Forgejo derivation-read routing lane. tegwick 2026-09-14 04:57:55 +02:00
  • 73e40af6ca Route attended T03 requester login to scoped owner reader tegwick 2026-09-14 02:47:32 +02:00
  • edbe95fe15 Route attended approval-client login to scoped OpenBao reader tegwick 2026-09-14 01:46:46 +02:00
  • 5b1a508610 docs: mark the unknown cell, measure the coverage we asked to publish tegwick 2026-09-10 08:02:10 +02:00
  • a942ce805d docs: record the answered custody authority on the qonto lane tegwick 2026-09-10 08:02:10 +02:00
  • 66db87e6ae feat: refuse to answer a write with a read (WARDEN-WP-0038) tegwick 2026-09-10 08:02:10 +02:00
  • 9c01a8a212 chore: record hub ids for WARDEN-WP-0040 tegwick 2026-09-09 16:42:01 +02:00
  • d8791a9296 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-09 16:41:44 +02:00
  • 3aedd8f844 docs: record the answers received and the questions routed tegwick 2026-09-09 16:40:46 +02:00
  • 1e3eb8df2a chore: refresh high-risk paths for committed catalog tegwick 2026-09-09 14:43:48 +02:00
  • 83fdd08f88 fix: name the npm KV field, not the env var it becomes tegwick 2026-09-09 14:43:44 +02:00
  • 8e1b621116 docs: assent to v0.8 obligation 3, and price its adoption tegwick 2026-09-09 14:42:20 +02:00
  • df48ee96e0 feat: assert flex-auth ceiling keys are declared, not assumed tegwick 2026-09-09 14:40:05 +02:00
  • 3a01b8f1b5 chore(records): index the policy refusal workplan and residual tegwick 2026-09-08 20:35:52 +02:00
  • 084bca783b chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 20:23:59 +02:00
  • 589d9067da repo.work.assign_missing_identifiers repo-manager 2026-09-08 17:04:02 +02:00
  • 541cd9043f docs(warden): record installed refusal proof and live binding residual tegwick 2026-09-08 17:03:58 +02:00
  • 19bb75c614 fix(install): refresh Warden source when reinstalling the CLI tegwick 2026-09-08 16:58:22 +02:00
  • 31d9b6671c Refuse explicit policy authentication and binding denials before side effects tegwick 2026-09-08 16:46:00 +02:00
  • 11e5e8be0f chore: record hub ids for 2026-09-08 workplans tegwick 2026-09-08 14:57:42 +02:00
  • 89a8dea2a1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 14:57:31 +02:00
  • b9ca0cc3f5 chore: refresh high-risk paths for committed catalog tegwick 2026-09-08 14:55:03 +02:00
  • c1330049d9 docs: narrow qonto blocker, record key-cape lane ownership tegwick 2026-09-08 14:55:02 +02:00
  • 96dbb22aab docs: use canonical State Hub reads with caller attribution tegwick 2026-09-05 10:24:19 +02:00
  • 37b8f39bd0 chore: synchronize work-record index tegwick 2026-09-05 01:26:57 +02:00
  • afc50354df chore: refresh high-risk paths for committed catalog tegwick 2026-09-05 01:22:37 +02:00
  • 00145d705e feat: complete local layer model v0.7 conformance work tegwick 2026-09-05 01:19:48 +02:00
  • 89b117f640 docs(workplan): persist Forgejo token rotation gate tegwick 2026-09-04 23:42:24 +02:00
  • 81f28ff814 feat(routing): repoint whynot npm lane to Forgejo tegwick 2026-09-04 23:39:11 +02:00
  • efabe526d8 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-04 23:31:05 +02:00
  • 60cf826c43 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-04 23:19:11 +02:00
  • 8afcc9c321 chore: refresh Warden work-record indexes tegwick 2026-09-01 01:27:55 +02:00
  • 529feeac49 repo.work.assign_missing_identifiers repo-manager 2026-09-01 00:51:59 +02:00
  • 9770d6ad66 docs: close Warden credential workplans tegwick 2026-09-01 00:51:52 +02:00
  • 31694ab64d chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-01 00:50:08 +02:00
  • eddb5d426b chore: refresh high-risk credential paths tegwick 2026-09-01 00:47:25 +02:00
  • 4fee839b11 feat: route Policy Nexus source credential tegwick 2026-09-01 00:46:28 +02:00
  • 8f01eefb1e Preserve Warden config in attended child tegwick 2026-09-01 00:24:18 +02:00
  • b4c1d3900a Fix contained OpenBao login handoff tegwick 2026-09-01 00:13:26 +02:00
  • 4e267179db chore(registrar): assign State Hub identifiers repo-manager 2026-08-29 14:56:21 +02:00
  • d18d18e313 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-29 14:56:20 +02:00
  • 2e3ff772f4 Refresh work-record index for WARDEN-WP-0034 tegwick 2026-08-29 14:55:36 +02:00
  • fd08950231 Align INTENT and SCOPE to layer model v0.7; assess gaps; open WARDEN-WP-0034 tegwick 2026-08-29 14:50:55 +02:00
  • 94f32bd160 Review layer model v0.6; publish the PEP stance map §6.4 requires tegwick 2026-08-29 10:20:49 +02:00
  • ec625873fb Review layer model v0.4; correct an unsound audit claim it exposes tegwick 2026-08-29 02:46:50 +02:00
  • f815bb35ca Implement §5.3 machine-readably — layer.yaml, checker, conformance tests tegwick 2026-08-29 02:45:29 +02:00
  • 57d39ede0f Refresh work-record index tegwick 2026-08-28 22:43:06 +02:00
  • f289465b90 repo.work.create_intake WARDEN-IN-0002 repo-manager 2026-08-28 22:40:24 +02:00
  • a45280f30d chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-28 22:02:58 +02:00
  • 61c992923c WARDEN-WP-0027-T02: the owner gate closed five days ago tegwick 2026-08-28 22:01:47 +02:00
  • ee94c18938 WARDEN-WP-0033 finished — key-cape accepted the issuance question five days ago tegwick 2026-08-28 22:00:09 +02:00
  • d7f4ebcfe0 Re-emit the high-risk path artifact after the NetKingdom SSO lanes tegwick 2026-08-28 21:55:33 +02:00
  • f766400563 chore(registrar): assign State Hub identifiers repo-manager 2026-08-28 21:52:03 +02:00
  • 70d8b503f0 Assent to the NetKingdom security layer model (WARDEN-IN-0001) tegwick 2026-08-28 21:47:44 +02:00
  • 85d3078bae Refresh work-record index tegwick 2026-08-28 21:35:57 +02:00
  • 467635e84b repo.work.create_intake WARDEN-IN-0001 repo-manager 2026-08-28 21:30:28 +02:00
  • 15730bb650 Point layering note at the published standard tegwick 2026-08-28 21:21:08 +02:00
  • 347e47ce8e Note NetKingdom layering review in INTENT tegwick 2026-08-28 20:33:43 +02:00
  • 37c387bd34 fix(workplans): qualify archived ad-hoc identifiers tegwick 2026-08-28 00:34:02 +02:00
  • 030362085a fix(workplans): qualify ad-hoc identifiers with the repository prefix tegwick 2026-08-28 00:28:23 +02:00
  • 6e66a56653 fix(routing): state-hub lane uses Kubernetes auth, not an AppRole mason/state-hub-forge-derivation-read tegwick 2026-08-27 22:49:03 +02:00
  • 6294e4b521 chore(registry): regenerate high-risk data paths tegwick 2026-08-26 21:56:55 +02:00
  • 3a4333d850 feat(routing): propose state-hub-forge-derivation-read lane (draft) tegwick 2026-08-26 21:56:44 +02:00
  • 0fc581ffb9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 20:17:24 +02:00
  • 186fa99f58 fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:16:12 +02:00
  • 76e545ecf0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:56:00 +02:00
  • 51e1434cdb fix(workplan): point workplan at its authoritative projection id codex 2026-08-25 17:37:51 +02:00
  • 9087edf673 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:31 +02:00
  • c374d41a49 Add NetKingdom SSO credential routing lanes tegwick 2026-08-23 21:43:12 +02:00
  • c8fa02adf0 docs: advance remaining owner gates tegwick 2026-08-23 11:25:03 +02:00
  • bc1966da82 docs: record attended login containment evidence tegwick 2026-08-23 01:32:59 +02:00
  • 0fae0904ce fix: contain attended OpenBao login output tegwick 2026-08-23 01:31:05 +02:00
  • 461f580813 docs: project remaining WP0027 owner gates tegwick 2026-08-22 23:50:46 +02:00
  • cdb44a8f23 docs: project WP0027 infra review contract tegwick 2026-08-22 22:38:00 +02:00
  • 7fa6985f72 docs: record recovery preparation boundaries tegwick 2026-08-22 22:12:52 +02:00
  • 5ac47520b1 docs: establish attended recovery drill scenario tegwick 2026-08-22 22:00:35 +02:00
  • 2c1fc25e43 test: account for recovery ceremony lane tegwick 2026-08-22 20:58:50 +02:00
  • 8cd10eae17 chore: refresh high-risk route artifact tegwick 2026-08-22 20:55:08 +02:00