86 commits

Author	SHA1	Message	Date
codex	47425d35bb	Verify denied operations on the actual file-drop DAV endpoint ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:41:23 +02:00
codex	feee30988b	Request create-only Nextcloud share without public-upload permission override ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:40:26 +02:00
codex	8fb4407832	Prepare dedicated Backup account cutover with quota and recovery verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:35:13 +02:00
codex	3759850cc4	Document recovered ESO lanes and recognize explicit invalid-token responses ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:51:40 +02:00
codex	153223983f	Verify fresh ESO reconciliation and safely retire unused delivery tokens ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:40:46 +02:00
codex	bd2e6e86b8	Prepare bounded Kubernetes authentication recovery for three ESO lanes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:38:19 +02:00
codex	ae27a42b18	Require signature rejection in predecessor acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 17:58:01 +02:00
codex	6f89388901	Add contained live signing and rotation acceptance probe ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 17:55:08 +02:00
codex	9c86983f1a	Allow bounded ESO token self-validation and cleanup ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 16:47:26 +02:00
codex	238d261536	fix: preserve unrelated live boundary rules during signing lane apply ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102	2026-09-05 16:43:47 +02:00
codex	80793afe4f	Pin signing-lane writes to the verified primary cluster ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 16:41:46 +02:00
codex	a46a6d8213	Prepare bounded State Hub preflight signing lane ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:50:27 +02:00
codex	234b1b559f	Implement S3 service assurance and admission checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:43:55 +02:00
codex	da42f764c0	Add failure-safe cluster image capture hook ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:04:38 +02:00
codex	f637989a69	Refuse prune apply when requested image inventories are unavailable ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 02:00:50 +02:00
codex	0349a08e1b	Harden backup credentials and add durable image inventory publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 01:53:24 +02:00
codex	62423fd092	Activate Policy Nexus source credential lane ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-09-01 01:35:48 +02:00
codex	a6d47c51cc	Record Policy Nexus metadata apply and diagnose bootstrap ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-09-01 00:18:15 +02:00
codex	1b85a3ef3d	Add attended Policy Nexus source bootstrap ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-08-31 23:24:05 +02:00
codex	f342f9605e	Add contained Policy Nexus CCR apply wrapper ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-08-31 23:12:16 +02:00
codex	d18649fc6e	feat(RAILIANCE-WP-0027): add contained callback role update ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 14:37:01 +02:00
codex	c9d02147d3	Adopt canonical flex-auth credential checks ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:03:40 +02:00
codex	517f68593d	feat(RAILIANCE-WP-0027): prepare operator-only OpenBao access ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 12:50:23 +02:00
codex	2a5c002aa5	Prepare canonical custody for audit E2 third attempt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 23:23:41 +02:00
codex	30e6edc236	Add versioned ephemeral custody lifecycle ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 21:56:42 +02:00
codex	d239ed33c3	Harden remote kubectl argument quoting ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 21:25:20 +02:00
codex	f135c0af35	Bind audit E2 retry projection to new engagement ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 20:56:58 +02:00
codex	891d90e6c9	add attended custody for audit-core E2 retry ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 20:49:11 +02:00
codex	a557208a4a	Add direct WP-0024 load driver handoff ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 16:17:03 +02:00
codex	d8c0cd38a7	Report WP-0024 approvals by task ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:57:52 +02:00
codex	0d9cebedea	Add direct WP-0024 owner review interface ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:15:02 +02:00
codex	3f9e4535d1	Harden WP-0024 recovery execution gates ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:00:18 +02:00
codex	bd25f7fa40	Add audit recovery exercise preflights ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 13:16:13 +02:00
codex	864cc20b96	Add attended Whitehat E2 credential projection ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 12:59:38 +02:00
codex	429cc912ed	Finish coding-agent high-risk boundary coverage ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 10:03:54 +02:00
codex	382f04412a	Close CCR drift and high-risk policy gaps	2026-08-21 01:29:28 +02:00
codex	34a3123799	Finish RAILIANCE-WP-0017 consumption-mode enforcement ... Read the resource-control open/restricted signal and refuse new orders that would exceed a restricted entity's published allowance. Open and missing signals stay unchanged. Safety paths admit with an exception.	2026-08-15 14:56:02 +02:00
codex	6033ae1aef	Finish RAILIANCE-WP-0016 apps-pg resource evidence ... Publish capacity, recovery, labor, and allocation-driver evidence for resource:railiance:apps-pg so resource-control can forecast and allocate without reading application data or inventing booked cost.	2026-08-14 02:05:25 +02:00
codex	dfa6373985	Close RAILIANCE-WP-0015-T06 rapp credential-lane binding ... Document the one recipe a new rapp uses to acquire runtime secrets: standing KV secrets bind through a CCR target.rapp, leases through grant rapp_id. Stamp the existing postgres grants and the qonto workload CCR. Gate, delivery, and revocation are unchanged.	2026-08-14 00:47:28 +02:00
codex	ccb5972b42	Close RAILIANCE-WP-0015-T02 platform rapp schema convergence ... Converge the S3 platform-service pattern onto ADR-0007, emit the reef-railiance live deployable inventory for the family coverage check, and mark T02 done. Declaration edits land in rapp-openbao and rapp-postgres.	2026-08-14 00:39:06 +02:00
codex	9f6bdffec4	Broker audit-core dynamic database credentials	2026-08-10 19:36:30 +02:00
codex	12903e3bed	Cut forgejo package prune over to OpenBao lane	2026-07-26 09:32:08 +02:00
tegwick	ca4e1526bd	prune: merge exported live-image files into protection (multi-cluster) ... ACTIVITY-WP-0020-T07: the kubectl scan only sees the prune host's own cluster. New repeatable --live-images-file merges image refs exported from other production clusters; missing file surfaces as WARN (reduced coverage), forgejo-registry tags protected, other registries ignored. 5/5 tests. Evidence gathered 2026-07-18: activity-core on railiance01 runs a locally-imported image (activity-core:railiance01-prod), not a forgejo registry tag — the largest would_delete set has no live registry consumer. Live forgejo tags: state-hub:main-1cf949b (railiance01), issue-core:0.2.1 + state-hub:f2e042a + vergabe-teilnahme:064d295 (coulombcore cluster). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-18 13:54:13 +02:00
tegwick	86209fa90c	CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist ... Enable tenant commercial secrets: applier accepts mount tenants/, apply policy and OIDC role for company-email IMAP (metadata only; values are founder Red provision). Extend agent-high-risk-boundary for the path.	2026-07-17 00:09:28 +02:00
tegwick	e9e631fbf4	feat(forgejo-package-prune): protect image tags running live in the cluster ... Adds collect_live_cluster_versions() — enumerates pod container images via kubectl and protects any forgejo.coulomb.social/coulomb/<name>:<tag>. Closes the gap where CI-deployed apps (e.g. state-hub) pin a live tag absent from Helm values. On by default (--no-protect-live to skip); emits protection_notes + live_protection in the JSON summary so consumers can detect reduced coverage. Verified against production: protects state-hub/vergabe/issue-core live tags. ACTIVITY-WP-0020 T07 (partial — see workplan note re multi-cluster coverage). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 14:44:03 +02:00
tegwick	6f7ca31a6d	fix(forgejo-package-prune): correct version enumeration + network robustness ... Forgejo has no per-package /versions endpoint — the list endpoint returns one entry per (name, version). build_delete_plans now groups list results by name instead of calling a 404ing /versions sub-path. Removed dead list_versions/_paginate. Added retry + longer timeout to _api_request for slow/large registry listings (container list was timing out). Updated fixture test to the grouped model. Dry-run now clean: 29 candidate deletions across 5 container packages, 0 errors (was 53× HTTP 404). ACTIVITY-WP-0020 T02 fix; enable/apply still gated on protection-coverage review (T05). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 02:46:15 +02:00
tegwick	4a824d72bd	Apply CCR-2026-0006 Forgejo admin PAT lane metadata ... Record platform-operator approval, delegated policy/OIDC role apply, negative verification evidence, and add attended PAT provision script.	2026-07-12 16:07:32 +02:00
tegwick	618641c984	fix(forgejo): accept FORGEJO_ADMIN_TOKEN and document PAT setup ... Align prune auth with railiance-apps forgejo tools and explain that package prune needs a Forgejo PAT, not the OpenBao backup lane.	2026-07-12 11:57:35 +02:00
tegwick	715631dedd	feat(forgejo): add package prune script with retention depth 3 ... List and optionally delete package versions beyond the newest three, protecting production Helm image tags. Adds Make targets and unit tests for ACTIVITY-WP-0020.	2026-07-12 11:35:04 +02:00
tegwick	b38b8c1f7f	Send workplan_id only on State Hub progress metadata posts	2026-07-09 00:32:54 +02:00