ops-warden/wiki/playbooks
tegwick 64142527a7 Activate keycape-client-secret-generate (RPF-WP-0054 done)
railiance-platform's go-ahead (message 20973a9c) after key-cape confirmed the
secret format and the T05 probe passed. Promotion checklist: owner confirmed,
playbook, owner-native exec, probe evidence, rotation and delegation present;
routing test added. The live oidc-browser-relying-party type is now plannable.
CredentialRouting lists the lane and adds fluid-telegram-operator to drafts.
WP-0044-T03 now waits only on the Forgejo case materializing (MASON-WP-0010-T03).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 427672@bnt-lap001
Assistant-Session: a0a2367e-4697-440c-a4e5-9713c009f6d8
2026-10-10 13:16:48 +02:00
..
activity-core-issue-sink.md Refresh the activity-core issue-sink lane; close WP-0032-T01 2026-08-21 00:43:42 +02:00
agent-harness-secrets.md WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
agent-read-boundary.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
audit-core-senders.md Catalog fluid-telegram-operator (draft) and tenant-engine sender projection; case plan env spec and case-ref 2026-10-09 19:59:49 +02:00
binky-company-email-imap.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
binky-qonto-api.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
catalog-lane-promotion.md Ship WARDEN-WP-0030: delegation register for every catalog lane 2026-08-15 20:54:58 +02:00
core-hub-forgejo-source-read.md CUST-WP-0075: catalog entry core-hub-forgejo-source-read (CCR-2026-0031) 2026-10-03 12:55:08 +02:00
coulomb-social-runtime-env.md Note apps-pg live and coulomb-social DB connectivity in playbook 2026-08-09 02:18:17 +02:00
database-dynamic-credentials.md Route dynamic database credentials to rapp-postgres 2026-08-10 19:37:05 +02:00
email-connect-transactional.md Route email-connect transactional SMTP and ingest token. 2026-08-12 13:32:11 +02:00
exposed-taint.md WARDEN-WP-0026 finish Strand A (T04/T05/T07) 2026-07-16 23:26:26 +02:00
flex-auth-decision-envelope-signing-key.md Draft the flex-auth envelope-signing credential route. 2026-09-14 09:59:11 +02:00
fluid-telegram-operator.md Catalog fluid-telegram-operator (draft) and tenant-engine sender projection; case plan env spec and case-ref 2026-10-09 19:59:49 +02:00
forgejo-admin-api-token.md WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
inbound-library-imap-approle.md Route inbound-library-imap-approle (ILIB-WP-0003-T05). 2026-10-05 16:12:48 +02:00
informed-decision-sitting-requester-login.md Point sitting-create at the attended-exec wrapper. 2026-09-15 22:31:44 +02:00
issue-core-ingestion-api-key.md Promote issue-core-ingestion-api-key and openrouter-llm-connect lanes to active 2026-07-02 20:48:39 +02:00
keycape-client-secret-generate.md Activate keycape-client-secret-generate (RPF-WP-0054 done) 2026-10-10 13:16:48 +02:00
net-kingdom-sso-bind-credentials.md Add NetKingdom SSO credential routing lanes 2026-08-23 21:43:12 +02:00
netkingdom-layer-declaration.md Apply GH-DEC-2026-021: identity-value pins, prose citations not reached. 2026-09-21 13:05:24 +02:00
object-storage-sts.md Complete WARDEN-WP-0012 routing scenario playbooks 2026-06-25 10:27:23 +02:00
openbao-platform-admin-login.md Fix attended login result auditing and reconcile blocked workplans 2026-09-28 09:44:49 +02:00
openbao-shamir-recovery-ceremony.md fix: route OpenBao recovery ceremonies safely 2026-08-22 20:54:45 +02:00
openbao-structure-survey.md Route OpenBao configuration and provisioning away from the structure survey 2026-10-08 23:21:46 +02:00
openrouter-llm-connect.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
operator-openbao-token-hygiene.md Add ops-warden-warden-sign-token routing lane for RAILIANCE-WP-0005 T08 2026-07-01 23:16:38 +02:00
ops-bridge-tunnel-cert.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
ops-warden-warden-sign-token.md Add ops-warden-warden-sign-token routing lane for RAILIANCE-WP-0005 T08 2026-07-01 23:16:38 +02:00
platform-supplier-credentials.md Add platform-supplier-credentials pointer and review the OIDC RP follow-through 2026-10-08 23:25:22 +02:00
policy-nexus-forgejo-source-read.md feat: route Policy Nexus source credential 2026-09-01 00:46:28 +02:00
railiance-backup-offsite-lane.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
rein-openweights-openrouter-approle.md Promote rein-openweights-openrouter-approle: draft -> active 2026-07-27 01:51:57 +02:00
reuse-surface-hub-write-token.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
scaleway-bootstrap.md catalog: draft scaleway-bootstrap lane 2026-08-14 17:36:17 +02:00
scheduled-worker.md feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete) 2026-06-30 15:24:10 +02:00
secrets-engine-approval-client-login.md Route attended approval-client login to scoped OpenBao reader 2026-09-14 01:46:46 +02:00
secrets-engine-requester-login.md Route attended T03 requester login to scoped owner reader 2026-09-14 02:47:32 +02:00
state-hub-forge-derivation-read.md Register the State Hub Forgejo derivation-read routing lane. 2026-09-14 04:57:55 +02:00
tenant-secret-onboarding.md feat: adopt security zones and explicit workload refs 2026-08-22 15:36:37 +02:00
whynot-design-npm-publish.md Revert the npm field, re-measure coverage, and hold the layer divergence 2026-09-21 02:16:33 +02:00