279 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	ab3cf5cdc5	Correct composed validation scope and retain the initial fixture skip ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7	2026-10-18 12:21:03 +02:00
tegwick	a927ec8cc8	Join Forgejo callback identity to the issuer-owned current access grant ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7	2026-10-18 12:17:36 +02:00
tegwick	308e83fcfb	Verify Forgejo PostgreSQL operations and preserve tracing hook context ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7	2026-10-18 03:21:56 +02:00
tegwick	3fb031a47f	Compose Forgejo private-input and authenticated decision build candidate ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7	2026-10-18 02:21:33 +02:00
tegwick	c29408ae67	Add pinned Forgejo release build path and track operational integration ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-18 00:06:47 +02:00
tegwick	944b30ad63	RAPPS-WP-0016: correct T02 role/policy naming, point T05 at 1.3 review ... T02 named the OpenBao policy as the role; the Kubernetes-auth role is external-secrets-keycape-forgejo-forgejo, carrying only policy workload-kv-read-keycape-forgejo-forgejo. T05's blocking reason now points at the Apps 1.3 owner-review record instead of the settled 1.2 option decision. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1045697@bnt-lap001 Assistant-Session: f16df812-4a57-4823-a2da-73c69e3bb4d1	2026-10-17 12:12:52 +02:00
tegwick	0da83472c4	Default railiance01 kubeconfig to config-railiance01 ... config-hosteurope names port 16443, but the k3s-api-railiance01 ops-bridge tunnel listens on 16444, so every default target failed with connection refused. Switch Makefile, tools and docs to ~/.kube/config-railiance01 and fix the restore recipe to rewrite the API address to the tunnel port. The node-side hostPath in STATE.md is unrelated and unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576	2026-10-17 11:46:40 +02:00
tegwick	74213d80f0	Close RAPPS-WP-0016-T01: break-glass admin sealed and verified ... forgejo_admin password lives only in OpenBao platform/workloads/forgejo/break-glass-admin (v1); founder-run local sign-in passed (HTTP 200, site admin). Value-free evidence committed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576	2026-10-17 11:41:51 +02:00
tegwick	fe5cabecd6	Add Forgejo break-glass seal/verify tooling and recovery runbook ... RAPPS-WP-0016-T01: founder-run targets rotate the forgejo_admin password into OpenBao (platform/workloads/forgejo/break-glass-admin) and record a value-free sign-in. T01 stays in progress until the founder runs them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576	2026-10-17 11:32:09 +02:00
tegwick	fbe012789e	Write back hub IDs for RAPPS-WP-0016-T05 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576	2026-10-17 11:26:05 +02:00
tegwick	9b0999fc37	Record Apps owner review for NK-WP-0048-T16 and plan consumer seams ... Needs-change verdict on deliver-consumer-secret and hand-over adapters (net-kingdom ff8f597); option C preferred. WP-0016 T02 moves to the platform/workloads/keycape/forgejo custody path; new T05 for the real Apps owner seams. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1031639@bnt-lap001 Assistant-Session: e5073fee-f4ae-4fc3-a75a-6c1fc83e0576	2026-10-17 11:25:11 +02:00
tegwick	a1ef3fe77a	Close verified reuse reader rollout and hosted discovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 05:49:19 +02:00
tegwick	2b9f030c24	Declare approved scoped Forgejo reader delivery to reuse hub ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 05:11:08 +02:00
tegwick	91f828b3c1	Declare approved hardened reuse image and exact source routing ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 02:15:36 +02:00
tegwick	ea2d4632a1	Prepare exact reader delivery recovery and native runtime proof ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 02:01:53 +02:00
tegwick	05f654e20f	Record canonical UUID bindings for reuse reader preparation ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 01:47:29 +02:00
tegwick	fb7d56d3dc	Prepare scoped reuse reader release with qualified content digests ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 01:47:29 +02:00
tegwick	72bcad86d7	docs(reuse): establish reviewed NetKingdom security capabilities ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-14 06:41:38 +02:00
tegwick	706461b845	security: restrict runner Docker API to pod loopback ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 18:41:10 +02:00
tegwick	50b66c4e44	security: restore pinned scanner custody before Forgejo startup ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 14:23:00 +02:00
tegwick	390a30a5c1	security: persist Forgejo receive hook inheritance for new repositories ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2	2026-10-13 13:59:43 +02:00
custodian-sync	c94b301c2a	chore(consistency): renormalize lifecycle state [auto] ... Updated by fix-consistency on 2026-10-11: - workplan status: ready → active Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 08:58:12 +02:00
tegwick	d349815195	Record source-only Forgejo reference migration decision ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 08:56:45 +02:00
tegwick	367f01cb4b	Prepare reviewed Forgejo consumer ESO scope and truthful recovery records ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 04:09:45 +02:00
tegwick	c4359794e8	Reconcile verified Policy Nexus release nine to approved source pins ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:27:48 +02:00
custodian-sync	602c9dcc1c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for railiance-apps Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:12:44 +02:00
tegwick	6953a23e62	Prepare unapproved exact Policy Nexus image and provenance pins ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade	2026-10-11 03:12:03 +02:00
tegwick	b6be18b727	chore(consistency): refresh the work-record index ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 19:13:32 +02:00
custodian-sync	21022a6e1c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-08: - update .custodian-brief.md for railiance-apps Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 19:13:02 +02:00
tegwick	7ea9e1c911	Add RAPPS-WP-0016: Forgejo sign-in through NetKingdom ... ORGREF-WP-0002-T05; founder-approved 2026-10-08. Break-glass first, no visibility change, depends on key-cape KEY-WP-0038. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012	2026-10-08 19:12:45 +02:00
tegwick	815ba1f70c	Record verified Coulomb revision 16 deployment and paired recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 09:38:11 +02:00
tegwick	2202e690cc	Pin Coulomb sharing and portability release dd83c90 ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 09:26:40 +02:00
tegwick	de2457cab2	Record Spaces-list cover revision15 rollout receipt ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 16:01:22 +02:00
tegwick	f5fc9eaa15	Pin Spaces-list Visual correction after founder review ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 15:10:02 +02:00
tegwick	7fb7a1c389	Record private Visual revision14 deployment receipt ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 13:44:02 +02:00
tegwick	2e95944ba3	Pin approved private Visual release for coulomb-social ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 12:43:40 +02:00
tegwick	4a807932fa	Record revision13 protocol naming verification ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-07 02:13:00 +02:00
tegwick	22c5695a21	Pin tested protocol naming corrective release ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-07 02:08:00 +02:00
tegwick	bca75d70a0	Record revision12 clipboard and content preservation proof ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-07 01:53:29 +02:00
tegwick	9499c39676	Pin full-protocol clipboard corrective release ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-07 00:29:16 +02:00
tegwick	5f6244ec62	docs: record verified real ReichelAg content import ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 22:54:35 +02:00
tegwick	f42f8024c0	docs: record paired recovery before first ReichelAg transfer ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 22:11:42 +02:00
tegwick	62dc523d7e	docs: record user workspace acceptance after login repair ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:54:42 +02:00
tegwick	ae2885728a	docs: record canonical user service correction deployment ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:52:28 +02:00
tegwick	3f8276e0ea	fix(coulomb): use canonical user service during personal login ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 20:50:14 +02:00
tegwick	8a57e37ded	Refresh work-record index after Coulomb deployment ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 17:03:39 +02:00
custodian-sync	df7b69ff3b	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-06: - update .custodian-brief.md for railiance-apps Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 17:03:10 +02:00
tegwick	f713aa90ef	Record approved deployment, backup and personal login blocker ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 17:02:15 +02:00
tegwick	3f5a90995d	Refresh release work-record index ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 16:45:27 +02:00
custodian-sync	0883760ee9	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-06: - update .custodian-brief.md for railiance-apps Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680	2026-10-06 16:44:33 +02:00