461 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
codex	52b24eab9a	Close issuer pin prerequisite and prepare named custody review decisions ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 00:40:23 +02:00
tegwick	e06d7fc390	docs(records): attach issuer proof to the receiving admission task ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 00:07:02 +02:00
tegwick	8f40d73d0f	docs(identity): record verified live upstream issuer and completed cleanup ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-08 23:50:55 +02:00
tegwick	a94d06dbcf	docs(custody): record attended KeyCape first-provision authority proof ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-08 22:40:04 +02:00
custodian-sync	a0bbae842c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-08: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: opus Assistant-Process: 1275505@bnt-lap001 Assistant-Session: 97265baa-f08f-4032-b290-a1e2965a69c5	2026-09-08 14:53:55 +02:00
codex	f3ba7ca882	Admit KeyCape approval-engine client custody paths and delivery ... Answers KEY-WP-0013-T02. Both proposed KV paths are confirmed unchanged; the field name is corrected to CLIENT_SECRET for the platform uppercase convention and the CCR validator. Kubernetes delivery references are confirmed against the live sso namespace. Attended authority is the governed openbao-platform-admin-login lane, and the rollout is one attended window ordered after the Authelia issuer precondition. Adds CCR-2026-0017/0018, two exact-path read policies, two namespace-limited ClusterSecretStores with Kubernetes auth, two ExternalSecrets, and RPF-WP-0035-T05. Nothing is applied and no value exists: both CCRs remain proposed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WLUjpv3ssxNRAEPPgLFnEB Assistant: claude-code Assistant-Model: opus Assistant-Process: 1275505@bnt-lap001 Assistant-Session: 97265baa-f08f-4032-b290-a1e2965a69c5	2026-09-08 14:53:32 +02:00
codex	805e0e5a2b	Verify telemetry essentials recovery from versioned Scaleway archive ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 23:46:20 +02:00
codex	92a0f5ed59	Establish attended telemetry Grafana custody and record private activation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 22:36:09 +02:00
codex	4c320cf053	Track Q2 receiver implementation and live acceptance dependency ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 19:18:14 +02:00
codex	31386c8e63	Validate OpenBao snapshot evidence and record assurance closure gates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 15:24:58 +02:00
codex	a867ec269a	Record archive recovery lifecycle and validate receipt provenance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 14:53:15 +02:00
codex	445f1361dc	Advance blocked assurance and operator callback work ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 14:16:49 +02:00
codex	a3ca4b708f	Verify full and essentials recovery and implement bounded retention tooling ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 11:10:50 +02:00
codex	11322a5256	Bind essentials recovery to explicit manifest and verified offsite provenance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 09:25:26 +02:00
codex	4707bf08d7	Implement bounded primary archive transfer and explicit essentials capture ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 08:00:59 +02:00
codex	69187c2f45	Size backup retention and design Nextcloud essentials tier ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:41:43 +02:00
codex	5567fa979e	Record successful full offsite Forgejo recovery and remaining custody gate ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:36:39 +02:00
codex	603c2926fa	Keep isolated SQL import on trusted container socket ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:25:14 +02:00
codex	3614985c5a	Wait for final PostgreSQL listener before recovery import ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:23:02 +02:00
codex	121f11de6a	Allow bounded atomic import of full Forgejo SQL archive ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:16:43 +02:00
codex	a9c1da4bd7	Bound rejected backup fixture cleanup to successful replacement recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:05:27 +02:00
codex	4a9d6e6c7f	Record verified Forgejo Scaleway backup and recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:03:02 +02:00
codex	be45c4e3fd	Extend isolated Scaleway recovery checks to Forgejo database metadata ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:51:55 +02:00
repo-manager	54819fb3f4	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:48:27 +02:00
codex	978383fadb	Define scoped Forgejo native backup on the Scaleway primary ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:48:25 +02:00
codex	63b5d6d426	Restore contained attended browser launch on WSL without xdg-utils ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:44:08 +02:00
codex	d05c3000c5	Verify Scaleway primary recovery and distinguish secondary backup coverage ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:34:43 +02:00
codex	9269d9d8f4	Prepare bounded recovery verification from the Scaleway primary ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:29:35 +02:00
codex	0af2c5148b	docs: link Anthropic custody to native delivery adoption ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb	2026-09-06 00:25:06 +02:00
codex	195a51a62c	Record rejected historical backup, verified fresh capture and worker activation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:35:20 +02:00
codex	34b9385bee	Deliver validated backup capture to worker via immutable runtime bundle ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:32:30 +02:00
codex	480d181549	Bind isolated restore to fetched artifact and document archive integrity gates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:21:54 +02:00
codex	0cca68da96	Prepare isolated offsite restore and stream large backup transfers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:18:05 +02:00
codex	d0c7249a0d	Reject unfinished or truncated Forgejo backup archives before encryption ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:10:22 +02:00
codex	6124a15c24	Prepare contained real-backup offsite retrieval for WP-0029 ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 21:35:26 +02:00
codex	34e78e8937	Review blocked platform obligations and archive completed ESO recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 21:16:53 +02:00
codex	b2c2848e49	feat: verify Anthropic custody through metadata only ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb	2026-09-05 21:15:14 +02:00
codex	a16c33942a	feat: prepare empty Anthropic custody entry for UI handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb	2026-09-05 21:10:43 +02:00
codex	cb6396caab	Record verified Backup account activation and consumer refresh ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:50:26 +02:00
codex	b6d648bfbe	Accept file-drop method-not-allowed denial response ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:47:49 +02:00
codex	3aa1f64eb0	docs: register Glas Anthropic credential request ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb	2026-09-05 20:47:48 +02:00
codex	47425d35bb	Verify denied operations on the actual file-drop DAV endpoint ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:41:23 +02:00
codex	feee30988b	Request create-only Nextcloud share without public-upload permission override ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:40:26 +02:00
repo-manager	708ba5d174	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:35:14 +02:00
codex	8fb4407832	Prepare dedicated Backup account cutover with quota and recovery verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:35:13 +02:00
codex	5ef016be01	Contain backup upload credentials and prepare provider recovery gates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:21:06 +02:00
codex	08a406f2f8	Close three-lane ESO recovery with live verification and cleanup evidence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:00:19 +02:00
codex	3759850cc4	Document recovered ESO lanes and recognize explicit invalid-token responses ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:51:40 +02:00
codex	153223983f	Verify fresh ESO reconciliation and safely retire unused delivery tokens ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:40:46 +02:00
repo-manager	dfc1641c49	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:38:20 +02:00