137 commits

Author	SHA1	Message	Date
codex	08a406f2f8	Close three-lane ESO recovery with live verification and cleanup evidence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:00:19 +02:00
codex	3759850cc4	Document recovered ESO lanes and recognize explicit invalid-token responses ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:51:40 +02:00
codex	5d6d8724b4	Complete live State Hub signing activation and rotation acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:12:37 +02:00
codex	238d261536	fix: preserve unrelated live boundary rules during signing lane apply ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102	2026-09-05 16:43:47 +02:00
codex	80793afe4f	Pin signing-lane writes to the verified primary cluster ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 16:41:46 +02:00
codex	5d288938f7	feat: prepare scoped State Hub preflight signing custody and rotation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102	2026-09-05 16:38:26 +02:00
codex	234b1b559f	Implement S3 service assurance and admission checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:43:55 +02:00
codex	9f83e426c7	Consolidate platform workplans and assess intent gaps ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:14:42 +02:00
codex	193b1276f3	Document credential lane designs and adopt fast projection sync ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:41:56 +02:00
codex	4c70fa83c5	Close identity repair after successful primary reconciliation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:24:35 +02:00
codex	6b41a43fa3	Separate Core Hub onboarding from archived apps-pg identities ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:22:29 +02:00
codex	3dc005df1c	Close live inventory migration and prepare workplan identity repair ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:17:42 +02:00
codex	da42f764c0	Add failure-safe cluster image capture hook ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:04:38 +02:00
codex	c7b0b3f572	Record prune verification and State Hub sync latency evidence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 02:04:22 +02:00
codex	f637989a69	Refuse prune apply when requested image inventories are unavailable ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 02:00:50 +02:00
codex	0349a08e1b	Harden backup credentials and add durable image inventory publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 01:53:24 +02:00
codex	f607d747da	Draft NetKingdom credential custody contract ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 21:48:29 +02:00
codex	18d61cd6a0	Record final KeyCape recovery receipt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:51:50 +02:00
codex	4619b8e08e	Bind attended KeyCape recovery window ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:44:38 +02:00
codex	dcaead43fd	Record post-rotation public JWKS observation ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:40:13 +02:00
codex	7ce3bc8380	Record KeyCape exposure owner receipts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:37:36 +02:00
codex	d18649fc6e	feat(RAILIANCE-WP-0027): add contained callback role update ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 14:37:01 +02:00
codex	c89187c064	Add KeyCape exposure approval template ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:35:31 +02:00
codex	453fed3b2d	Plan KeyCape exposure recovery ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:10:06 +02:00
codex	c9d02147d3	Adopt canonical flex-auth credential checks ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:03:40 +02:00
codex	517f68593d	feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 12:50:23 +02:00
codex	d7dae015df	Approve audit E2 third custody contract ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 23:30:07 +02:00
codex	2a5c002aa5	Prepare canonical custody for audit E2 third attempt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 23:23:41 +02:00
codex	30e6edc236	Add versioned ephemeral custody lifecycle ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 21:56:42 +02:00
codex	a557208a4a	Add direct WP-0024 load driver handoff ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 16:17:03 +02:00
codex	abf8855ae1	Include platform owner in WP-0024 receipts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:59:59 +02:00
codex	d8c0cd38a7	Report WP-0024 approvals by task ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:57:52 +02:00
codex	defb2a556d	Correct WP-0024 lease selection contract ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:46:12 +02:00
codex	0d9cebedea	Add direct WP-0024 owner review interface ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:15:02 +02:00
codex	3f9e4535d1	Harden WP-0024 recovery execution gates ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:00:18 +02:00
codex	bd25f7fa40	Add audit recovery exercise preflights ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 13:16:13 +02:00
codex	864cc20b96	Add attended Whitehat E2 credential projection ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 12:59:38 +02:00
codex	429cc912ed	Finish coding-agent high-risk boundary coverage ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 10:03:54 +02:00
codex	d40eb3c2a9	Finish hub-core credential lane workplan ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 00:28:18 +02:00
codex	382f04412a	Close CCR drift and high-risk policy gaps	2026-08-21 01:29:28 +02:00
codex	1206ed55da	Finish Core Hub private shadow onboarding	2026-08-21 00:51:06 +02:00
codex	90a0192e4f	Record Core Hub lease and network readiness	2026-08-20 23:44:35 +02:00
codex	07ed6217b7	Advance RPF-WP-0021 platform onboarding	2026-08-20 23:31:47 +02:00
codex	cb321deeab	Finish RPF-WP-0019 apps-pg controls and recovery	2026-08-20 22:58:45 +02:00
codex	ac69f90300	feat: prepare core hub platform onboarding	2026-08-20 11:18:30 +02:00
codex	56d516e10c	Add unique publication ids to platform ADRs ... RPLAT-ADR-0001–0003 so policy-nexus can register the S3, placement, and file-backed decision records.	2026-08-19 01:09:18 +02:00
codex	b1f973c2d5	Pin apps-pg targets to railiance01 by cluster identity; seed RPF-WP-0020 ... Two reachable clusters each carry a CNPG Cluster named apps-pg in a namespace named databases. KUBECONFIG is an environment variable, so the Makefile ?= default never applied, and RAILIANCE01_KUBECONFIG pointed at config-hosteurope - a different cluster. Had the environment pointed at the other reachable cluster instead of an unauthorized one, make apps-pg-deploy would have applied RPF-WP-0019 connection limits, role timeouts and backup config to the wrong cluster and reported success. The Unauthorized error was the only thing that prevented it. Filename selection cannot protect against this: both kubeconfigs resolve to a 127.0.0.1 tunnel port and the environment wins either way. railiance01-guard pins identity instead, comparing the live kube-system namespace UID against RAILIANCE01_CLUSTER_UID, and fails closed on mismatch or unreachability. It gates apps-pg deploy, backup-deploy, overflow-dry-run, status and shell. Verified refusing on the wrong cluster, refusing when unreachable, and passing on railiance01. Not global: db-status legitimately targets the other cluster for gitea-db. RPF-WP-0019 blocker note corrected - the cluster was never unreachable, our wiring was wrong. RPF-WP-0020 seeded for the pre-existing CCR test failure, which is two unrelated problems: CCR-2026-0010 is an active lane missing its whole openbao.auth block, and CCR-2026-0011 is an honest in-flight draft the suite has no way to express. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-18 15:18:37 +02:00
codex	dc4245361d	Finish RPF-WP-0018; RPF-WP-0019 repository-complete ... RPF-WP-0018 closed: all seven tasks done. The provider-declaration finding was adopted upstream and its canonical form is the provider: block in tenancy.yaml; adaptive-pricing declined the standing co-signature and supplied typed tier minima instead, recorded in ADR-0002. Three corrections against our own output are recorded in the documents rather than edited away. RPF-WP-0019 T03 done (ceiling of three, memory binding, apps-pg-2 named as overflow, enforced by make apps-pg-verify-capacity). T01/T02 are repository-complete: backup target, retention, per-consumer connection limits, role timeouts and Burstable resources are declared in source and published in s3-consumer-interfaces 1.1.0 before rollout. They stay in progress because no live application, backup success or restore proof exists, and declared configuration is not a section 13 artifact. T04 waits on that window. apps-pg R reason corrected to say the target is declared-not-applied rather than absent. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-18 13:35:04 +02:00
codex	b15215d191	RPF-WP-0018: mark unevidenced P1 claims; seed RPF-WP-0019 for apps-pg ... Placement policy 3.1 records that the P1 levels for vergabe and coulomb_social are provisioning declarations without the SS13 isolation probes - apps-pg has none. 3.2 records that apps-pg cannot produce the noisy-neighbour artifact at all until per-consumer controls exist, per SS13.4: with nothing to bind, a probe could only demonstrate degradation. RPF-WP-0019 seeded for the three live defects the disclosure work found: no backup, no per-consumer controls, no isolation probes. Kept separate from RPF-WP-0018 so declaring is not confused with fixing. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-17 23:01:57 +02:00
codex	cc4e659a9e	Correct the S3 posture declaration against Tenancy Posture SS13 ... Self-audit after reading SS6, SS11, SS12 and SS13 in full rather than the sections cited in review. openbao A:2 -> A:0. The claim was incoherent (it invoked the absence of tenant context to justify E:0 and ignored it to claim A2, which SS4.2 defines in terms of tenant context) and unevidenced at the moment of claiming, which SS13.1 forbids and SS13.1a does not excuse above the floor. The real authorization evidence, openbao-verify-token-grants.py, is consumer-boundary and is now cited under the provider statement. Floor claims carry reason: per SS13.1a; permanent-by-design lines are marked so SS12 guard does not read them as stalled. The provider-versus-consumer finding is narrowed: SS6 plus the flex-auth I1-forever precedent already express a structurally permanent low level, so that half is withdrawn. What survives is that a provider cannot state the level it makes reachable for its consumers. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-17 22:56:03 +02:00