tegwick c3eb59ea04 WARDEN-WP-0026 T06: rotation guidance registry + warden rotate-guide ... - routing model: RotationGuide (method rotate|re-establish, steps, owner, automatable), RouteEntry.rotation + has_rotation + vends_secret. - catalog parser: validate rotation block; secret-material screen gains a prose-safe mode (high-entropy detector only) so authored steps aren't tripped by substrings like "s."/"exists.". - CLI: `warden rotate-guide <id>` (human + --json); route show --json now carries has_rotation + rotation. - scorecard: catalog_rotation_coverage — every active secret-vending lane must carry a rotation block (SSH/login/pointer lanes exempt). Promotion checklist criterion 9. - data: rotation blocks for all 7 active vending lanes + the draft railiance-backup lane (re-establish: age keypair regen + re-encrypt). - fix pre-existing collision: bare `npm` keyword on forgejo-admin -> forgejo-npm so "npm token" routes to the generic lane (restores test_access expectations). - tests: rotation parse/coverage/prose-screen/CLI in tests/test_routing.py; scorecard count 6 -> 7. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-16 14:40:30 +02:00
..
__init__.py	Initial Commit	2026-03-28 00:45:43 +00:00
conftest.py	Implement WARDEN-WP-0024 experiential memory and agent sessions.	2026-07-02 23:40:45 +02:00
test_access.py	feat(WARDEN-WP-0019): route secret-exec lanes to secrets-engine (route-primary, proxy fallback)	2026-06-29 17:41:49 +02:00
test_audit.py	Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout	2026-07-01 23:32:38 +02:00
test_ca.py	feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir	2026-05-15 17:05:38 +02:00
test_cli.py	feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir	2026-05-15 17:05:38 +02:00
test_config.py	feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007)	2026-06-17 08:37:14 +02:00
test_doubles.py	Fix warden access proxy for catalog fetch commands with shell pipes.	2026-07-07 16:42:26 +02:00
test_flex_auth_registry.py	feat: close WP-0009/WP-0013 production integration stewardship strand	2026-06-24 12:44:32 +02:00
test_integration.py	feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir	2026-05-15 17:05:38 +02:00
test_inventory.py	feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing	2026-05-15 13:27:49 +02:00
test_memory.py	Enable implicit phase-memory activation on every warden command.	2026-07-03 00:49:36 +02:00
test_models.py	Initial Commit	2026-03-28 00:45:43 +00:00
test_policy.py	feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007)	2026-06-17 08:37:14 +02:00
test_posture.py	feat(WARDEN-WP-0015): T2 — machine-readable posture descriptors + warden policy	2026-06-27 18:10:54 +02:00
test_posture_conformance.py	feat(WARDEN-WP-0015): T3 conformance checker + T4 dev-tier contract doubles	2026-06-27 19:30:30 +02:00
test_principals_drift.py	feat: close WP-0009/WP-0013 production integration stewardship strand	2026-06-24 12:44:32 +02:00
test_proxy.py	Migrate reuse-surface hub token lane to OpenBao handoff	2026-07-07 22:38:45 +02:00
test_routing.py	WARDEN-WP-0026 T06: rotation guidance registry + warden rotate-guide	2026-07-16 14:40:30 +02:00
test_scorecard.py	WARDEN-WP-0026 T06: rotation guidance registry + warden rotate-guide	2026-07-16 14:40:30 +02:00
test_tunnel_cert_readiness.py	feat(WARDEN-WP-0016): ops-bridge cert_command readiness gate + handoff	2026-06-27 19:50:28 +02:00
test_vault.py	Implement WP-0022 audit trail and WP-0023 INTENT–SCOPE closeout	2026-07-01 23:32:38 +02:00
test_worker.py	feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete)	2026-06-30 15:24:10 +02:00