| .. |
|
build_flex_auth_registry.py
|
feat: adopt security zones and explicit workload refs
|
2026-08-22 15:36:37 +02:00 |
|
check_agent_read_boundary.py
|
Route railiance01 admin kubeconfig through an attended lane
|
2026-10-22 08:53:33 +02:00 |
|
check_flex_auth_manifest_coverage.py
|
feat: assert flex-auth ceiling keys are declared, not assumed
|
2026-09-09 14:40:05 +02:00 |
|
check_layer_conformance.py
|
Prepare reviewed durable case execution kernel and accepted layer pins
|
2026-10-11 02:21:03 +02:00 |
|
check_policy_caller_identity.py
|
docs: record live zone config migration
|
2026-08-22 15:50:42 +02:00 |
|
check_principals_drift.py
|
feat: close WP-0009/WP-0013 production integration stewardship strand
|
2026-06-24 12:44:32 +02:00 |
|
check_secret_posture_conformance.py
|
feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles
|
2026-06-27 19:30:30 +02:00 |
|
check_tunnel_cert_readiness.py
|
feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff
|
2026-06-27 19:50:28 +02:00 |
|
emit_high_risk_paths.py
|
Route railiance01 admin kubeconfig through an attended lane
|
2026-10-22 08:53:33 +02:00 |
|
install-worker-timer.sh
|
feat(WARDEN-WP-0021): T1+T2 — scheduled worker tick enabled (systemd --user timer)
|
2026-06-30 15:19:23 +02:00 |
|
policy_gate_production_smoke.sh
|
scripts: default sibling path flex-auth -> access-engine after repository rename
|
2026-09-30 20:43:19 +02:00 |
|
report_coverage.py
|
docs: mark the unknown cell, measure the coverage we asked to publish
|
2026-09-10 08:02:10 +02:00 |
|
report_workload_join.py
|
chore: refresh generated security inputs
|
2026-08-22 15:37:33 +02:00 |
|
run_unit_tests.py
|
test: isolate ordinary unit runs from ambient credentials and provider I/O
|
2026-10-17 21:30:12 +02:00 |
|
worker-tick.sh
|
feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete)
|
2026-06-30 15:24:10 +02:00 |
