coulomb/ops-warden
4
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

Commit graph

  • e3b9b1620c fix: route OpenBao recovery ceremonies safely tegwick 2026-08-22 20:54:45 +02:00
  • fff76ef089 docs: activate credential break-glass planning tegwick 2026-08-22 20:36:49 +02:00
  • 5c2368ad42 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 20:24:17 +02:00
  • 72a3c0b6e2 chore(registrar): assign State Hub identifiers repo-manager 2026-08-22 19:09:26 +02:00
  • 145e31034e chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 19:09:25 +02:00
  • 8280c0b7b7 fix: route OpenBao platform administration login tegwick 2026-08-22 19:08:21 +02:00
  • e24d2d5bd0 docs: record live zone config migration tegwick 2026-08-22 15:50:42 +02:00
  • bebcdf929c docs: assess security zone workplan DoD tegwick 2026-08-22 15:42:23 +02:00
  • 59d426b87b chore(consistency): sync completed zone task tegwick 2026-08-22 15:40:41 +02:00
  • 4143d1d8da chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 15:40:33 +02:00
  • 6604ace982 chore: refresh generated security inputs tegwick 2026-08-22 15:37:33 +02:00
  • 7ce58ae638 feat: adopt security zones and explicit workload refs tegwick 2026-08-22 15:36:37 +02:00
  • 12c637cbf2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-22 12:42:42 +02:00
  • e18894ee5b Scale the blocker window by lane risk, converging with risk-nexus tegwick 2026-08-21 13:29:29 +02:00
  • 55f0f47a02 WARDEN-WP-0033-T05: split the stale cadences, and record how a blocker was verified tegwick 2026-08-21 13:26:10 +02:00
  • a565e62b2f Regenerate the artifact; correct the test that classified openbao-api-key as a gap tegwick 2026-08-21 09:06:08 +02:00
  • 675e04e8e6 Correct the delegation register after secrets-engine's SECRETS-WP-0006 answer tegwick 2026-08-21 09:04:54 +02:00
  • b30626edcf chore(consistency): regenerate WORK-RECORDS.md tegwick 2026-08-21 08:41:22 +02:00
  • 6cd969dda9 WARDEN-WP-0033-T04: route the coding-agent issuance identity to key-cape tegwick 2026-08-21 08:39:10 +02:00
  • 6e1d5201aa WARDEN-WP-0033-T03: emit the high-risk data-path artifact tegwick 2026-08-21 08:38:13 +02:00
  • c357ce5908 WARDEN-WP-0033 T01/T02: two under-graded lanes, and ADR-0008 tegwick 2026-08-21 08:36:42 +02:00
  • 9b7e2e9bd2 Open WARDEN-WP-0033 — native lane handoff tegwick 2026-08-21 08:30:19 +02:00
  • 06d0a1e690 Reframe the secrets-engine blocker on seven interim lanes tegwick 2026-08-21 01:26:07 +02:00
  • 0dafb53e84 WARDEN-WP-0032-T06: record the live verification, and that the blocker was stale tegwick 2026-08-21 00:50:45 +02:00
  • edb587851c Verify the OpenBao read-boundary live; ship the invariant tegwick 2026-08-21 00:50:00 +02:00
  • 801bbe7b35 chore(consistency): regenerate WORK-RECORDS.md tegwick 2026-08-21 00:45:49 +02:00
  • 1cd71e74d7 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-21 00:45:34 +02:00
  • 9ed8b452a1 Refresh the activity-core issue-sink lane; close WP-0032-T01 tegwick 2026-08-21 00:43:42 +02:00
  • 72f7dc2c5d Add scripts/report_workload_join.py — measure the lane-to-workload join tegwick 2026-08-20 07:22:07 +02:00
  • 50e185ed7b Check the OpenBao half of the read-boundary; route RISK-F-0004 tegwick 2026-08-20 07:11:03 +02:00
  • 9fc5a735c6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-20 01:14:31 +02:00
  • d0d4f9d8fc Make the risk grade fail safe, and gate CI on absence tegwick 2026-08-20 01:13:35 +02:00
  • ac85259c20 Grade every catalog lane; record ADR-0007 tegwick 2026-08-19 23:44:58 +02:00
  • 7b8dd3467b WARDEN-WP-0032: grade the exposed lanes now, structural fix after the model tegwick 2026-08-19 23:24:34 +02:00
  • f528c1df31 Declare ops-warden's tenancy posture tegwick 2026-08-19 22:20:44 +02:00
  • 9008ded1b0 WARDEN-WP-0032: net-kingdom amendment — carrier file settled, organization_posture answered tegwick 2026-08-19 22:06:39 +02:00
  • b1070be644 WARDEN-WP-0032: flex-auth amendments to T02 and T03 tegwick 2026-08-19 22:00:13 +02:00
  • 5e2f7dc939 chore(consistency): sync WP-0032 hub ids [auto] tegwick 2026-08-19 21:22:59 +02:00
  • 8c58f8bfa1 Hand the zone model to zone-engine; keep WP-0032 as the consumer side tegwick 2026-08-19 21:20:34 +02:00
  • b845f4b51e Draft WARDEN-WP-0032 properly — security zones, ownership question first tegwick 2026-08-19 20:38:25 +02:00
  • 3d968bb993 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 20:32:22 +02:00
  • cbf6828061 ADR-0006: enforcement is zone-scoped; defer the policy.enabled flip tegwick 2026-08-19 20:31:28 +02:00
  • 661176e37a Retire CoulombCore references; correct the 16443 diagnosis tegwick 2026-08-19 19:31:41 +02:00
  • e22f9b3434 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 19:07:27 +02:00
  • 654c05dece WARDEN-WP-0031 T04: prove ops-warden's caller identity against the live pin tegwick 2026-08-19 19:06:04 +02:00
  • 9b9bfe565a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-19 15:10:03 +02:00
  • 0a331413a2 Send a caller identity to flex-auth so policy.enabled can flip tegwick 2026-08-19 15:08:34 +02:00
  • 35aff380a3 Lift ops-warden's binding rules into owned ADRs tegwick 2026-08-18 13:35:13 +02:00
  • faa4f2c23e chore(consistency): register ADHOC-2026-08-17, refresh WORK-RECORDS [auto] tegwick 2026-08-18 13:25:31 +02:00
  • 683f22d986 Adopt risk-nexus finding routing; record the ADR gap policy-nexus exposes tegwick 2026-08-18 13:04:50 +02:00
  • 3447687bbc Answer flex-auth caller-auth question; refresh two delegation lanes tegwick 2026-08-17 22:55:33 +02:00
  • 263b919c17 Refresh WORK-RECORDS for finished WARDEN-WP-0030 tegwick 2026-08-15 20:56:51 +02:00
  • c93e3c9b43 Ship WARDEN-WP-0030: delegation register for every catalog lane tegwick 2026-08-15 20:54:58 +02:00
  • 8d3706fa06 Refresh WORK-RECORDS for finished ADHOC-2026-08-11 tegwick 2026-08-15 20:37:34 +02:00
  • 49b8618ff1 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-15 20:36:20 +02:00
  • bfa0eda327 Close ADHOC-2026-08-11: hand warden-sign AppRole to WP-0027 tegwick 2026-08-15 20:35:12 +02:00
  • 817af8bc6e catalog: draft scaleway-bootstrap lane tegwick 2026-08-14 17:36:17 +02:00
  • 56876ee456 Add draft routing entry audit-core-senders tegwick 2026-08-13 10:27:13 +02:00
  • 064a0736be Route email-connect transactional SMTP and ingest token. tegwick 2026-08-12 13:32:11 +02:00
  • 8d5188c24f Classify 5 proxy lanes interim; hold 6 pending secrets-engine tegwick 2026-08-12 01:33:29 +02:00
  • cd074caaaa Park the warden-sign AppRole with explicit un-park triggers tegwick 2026-08-11 14:32:04 +02:00
  • 9d42dd5abd Add WP-0030 delegation register; refresh INTENT and SCOPE tegwick 2026-08-11 11:11:01 +02:00
  • 95ecfe51e2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-11 10:40:49 +02:00
  • 538f08c050 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-11 10:39:53 +02:00
  • b346e63a07 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-11 10:38:53 +02:00
  • cd3eaac97e Triage the stale ops-warden inbox (11 unread) tegwick 2026-08-11 10:38:05 +02:00
  • 456fdc4b4f Repair stale rapp-qonto-keycape-client wiki anchor tegwick 2026-08-11 10:27:12 +02:00
  • a9086ad6b6 Route dynamic database credentials to rapp-postgres tegwick 2026-08-10 19:37:05 +02:00
  • 350f66472c Note apps-pg live and coulomb-social DB connectivity in playbook tegwick 2026-08-09 02:18:17 +02:00
  • d8d3d5b1a0 Route coulomb-social runtime env credentials via ops-warden catalog tegwick 2026-08-09 02:11:34 +02:00
  • 979c6f68b4 Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) tegwick 2026-07-30 00:42:48 +02:00
  • 2e862bbff0 Route rapp-qonto workload identity tegwick 2026-07-27 20:37:09 +02:00
  • d961da1ef2 Promote rein-openweights-openrouter-approle: draft -> active tegwick 2026-07-27 01:51:57 +02:00
  • c0a50bc1bf Catalog: rein-openweights AppRole for non-interactive OpenRouter key read tegwick 2026-07-27 01:22:59 +02:00
  • cb6e9a73f4 catalog: promote binky-qonto-api to active (CCR-2026-0008) tegwick 2026-07-21 21:42:10 +02:00
  • 5d30220cc5 catalog: draft binky-qonto-api lane + playbook (CCR-2026-0008) tegwick 2026-07-21 21:26:25 +02:00
  • 507bbef6ea chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-18 17:00:26 +02:00
  • 5149946a4c WARDEN-WP-0029: implement plan front door, org posture, desk, freshness tegwick 2026-07-18 16:59:37 +02:00
  • 5c6b71b83b WARDEN-WP-0029: optimize workplan sequence, constraints, reuse map tegwick 2026-07-18 16:50:23 +02:00
  • cb762e06cb WARDEN-WP-0029: hub workstream/task id write-back tegwick 2026-07-18 16:40:16 +02:00
  • 7a08171dab chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-18 14:26:51 +02:00
  • 29645c9303 INTENT §7/§8 + WARDEN-WP-0029: policy front door, build-phase posture, founder surface tegwick 2026-07-18 14:26:15 +02:00
  • 5219104809 feat(catalog): agent-harness forgejo deploy + binky mail AppRole lanes tegwick 2026-07-17 23:57:55 +02:00
  • ffc3b22fb0 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:46:37 +02:00
  • 0cec8eef76 WARDEN-WP-0027: backlog with cancelled deferred tasks tegwick 2026-07-17 00:45:51 +02:00
  • 54fd31aa5c chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:45:35 +02:00
  • 6fe5034a65 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:45:35 +02:00
  • ffff2eff4f chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:45:35 +02:00
  • 885e362daa chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-07-17 00:45:35 +02:00
  • 25a691d49a WARDEN-WP-0027: park Strand B as backlog (C-23-safe) tegwick 2026-07-17 00:45:03 +02:00
  • 0433481e94 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-07-17 00:44:16 +02:00
  • 6bfbf64108 WARDEN-WP-0027: move Strand B to backlog tegwick 2026-07-17 00:43:42 +02:00
  • 59f0277f20 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:34:39 +02:00
  • c5ec9bdaa6 WARDEN-WP-0028: mark workplan finished after T05 tegwick 2026-07-17 00:34:00 +02:00
  • b6861e4b62 chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:33:55 +02:00
  • 053a1d7cee WARDEN-WP-0028: promote binky-company-email-imap active tegwick 2026-07-17 00:33:20 +02:00
  • 6b5432229f playbook: IONOS IMAP endpoints for binky-company-email-imap tegwick 2026-07-17 00:15:27 +02:00
  • 80ce5eb2df chore(consistency): sync task status from DB [auto] custodian-sync 2026-07-17 00:10:25 +02:00
  • 98a2339b81 WARDEN-WP-0028: tenant secrets on mount tenants/ (first lane draft) tegwick 2026-07-17 00:09:28 +02:00
  • b971403dad WARDEN-WP-0026 finish Strand A (T04/T05/T07) tegwick 2026-07-16 23:26:26 +02:00