Founder decision 2026-08-11: neither withdraw nor proceed. The broker covers the workstation, but unattended signing on a remote tunnel host is unresolved, and there the AppRole is narrower than placing the broker's issuer token. Recorded where each trigger will be hit: WP-0027 break-glass task (trust-root design), and the ops-bridge cutover playbook (token source must be resolved before going live). secrets-engine told to stop holding apply readiness. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| playbooks | ||
| AccessManagementDirective.md | ||
| AccessRouting.md | ||
| ActorInventoryPatterns.md | ||
| AuditTrail.md | ||
| CertCommandInterface.md | ||
| CredentialRouting.md | ||
| InterHubBootstrapAccessLane.md | ||
| NetKingdomSecurityMap.md | ||
| OpenBaoSshEngineChecklist.md | ||
| OperatorAccessAssist.md | ||
| OpsWardenConfig.md | ||
| OpsWardenMemory.md | ||
| PolicyGatedSigning.md | ||
| WorkloadSecurityPosture.md | ||