55 commits

Author	SHA1	Message	Date
codex	68b0a37f7d	Record attended login recovery and remaining T03 prerequisites ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 03:55:42 +02:00
codex	e0e4d88234	Retain attended preflight failure diagnostics before a safe retry ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 03:46:29 +02:00
codex	703d552ee7	Provision scoped T03 requester custody and native requests ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 02:47:32 +02:00
codex	525664efa3	Verify scoped approval client delivery through attended reader session ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 01:46:45 +02:00
codex	bbff2bfb93	Bind secrets-engine approval reader to confirmed operator group ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 01:30:23 +02:00
codex	817c122d07	Close factor credential expiry and recovery acceptance for P05 ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 22:20:14 +02:00
codex	2e2c31d237	Establish scoped KeyCape factor custody and verified automatic renewal ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 16:25:33 +02:00
codex	b75729b799	Record verified independent factory audit readback ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 16:35:14 +02:00
codex	005c68eb4c	Record native sender acceptance and retained audit readback gate ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 14:23:07 +02:00
codex	1ec5b587db	docs: accept native factory audit sender delivery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 10:31:15 +02:00
codex	df5980a873	docs: retain successful custody and exact delivery login wait ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 10:07:47 +02:00
codex	44314cad37	feat: deliver approved factory audit sender custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 09:38:27 +02:00
codex	290e2b51fd	Record live receiver gate and isolate readiness from attestation jobs ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 07:26:16 +02:00
codex	bfe65a5b05	Prepare scoped factory audit custody and enforce receiver compatibility ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 02:01:57 +02:00
codex	9d24086004	Settle the npm lane field, and record an ungoverned duplicate ... The attended session enumerated field names at the governed path: NPM_AUTH_TOKEN is the only field present, at KV version 2. This repository's record was correct. secrets-engine's lowercase field name and the ops-warden catalog change made on that statement both name a field absent from that path, so that change points the front door at nothing and must be reverted before next use. The both-fields reconciliation is ruled out. The same session found the legacy path is real: secret/coulomb/whynot-design/ npm/publish exists at version 1, created five days after the governed lane was verified, outside its policy and outside any CCR. Only metadata was read; field names were not enumerated and nothing was deleted. Disposition is the new RPF-WP-0035-T07, which asks first whether the consumer's proven publish has been reading the duplicate rather than the governed lane. Receipt carries field names only, attended_identity true, no mutation. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WLUjpv3ssxNRAEPPgLFnEB Assistant: claude-code Assistant-Model: opus Assistant-Process: 1275505@bnt-lap001 Assistant-Session: 97265baa-f08f-4032-b290-a1e2965a69c5	2026-09-10 09:03:22 +02:00
codex	c6dc4286e2	feat: verify live KeyCape custody and preserve versions on resume ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 02:18:12 +02:00
codex	b7861de20e	feat: admit and exercise KeyCape verifier custody activation ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 01:32:45 +02:00
codex	52b24eab9a	Close issuer pin prerequisite and prepare named custody review decisions ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-09 00:40:23 +02:00
tegwick	8f40d73d0f	docs(identity): record verified live upstream issuer and completed cleanup ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-08 23:50:55 +02:00
tegwick	a94d06dbcf	docs(custody): record attended KeyCape first-provision authority proof ... Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-08 22:40:04 +02:00
codex	805e0e5a2b	Verify telemetry essentials recovery from versioned Scaleway archive ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 23:46:20 +02:00
codex	92a0f5ed59	Establish attended telemetry Grafana custody and record private activation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 22:36:09 +02:00
codex	445f1361dc	Advance blocked assurance and operator callback work ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 14:16:49 +02:00
codex	a3ca4b708f	Verify full and essentials recovery and implement bounded retention tooling ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 11:10:50 +02:00
codex	69187c2f45	Size backup retention and design Nextcloud essentials tier ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:41:43 +02:00
codex	5567fa979e	Record successful full offsite Forgejo recovery and remaining custody gate ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:36:39 +02:00
codex	4a9d6e6c7f	Record verified Forgejo Scaleway backup and recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:03:02 +02:00
codex	d05c3000c5	Verify Scaleway primary recovery and distinguish secondary backup coverage ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:34:43 +02:00
codex	195a51a62c	Record rejected historical backup, verified fresh capture and worker activation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:35:20 +02:00
codex	34e78e8937	Review blocked platform obligations and archive completed ESO recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 21:16:53 +02:00
codex	cb6396caab	Record verified Backup account activation and consumer refresh ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:50:26 +02:00
codex	08a406f2f8	Close three-lane ESO recovery with live verification and cleanup evidence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:00:19 +02:00
codex	5d6d8724b4	Complete live State Hub signing activation and rotation acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:12:37 +02:00
codex	234b1b559f	Implement S3 service assurance and admission checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:43:55 +02:00
codex	4c70fa83c5	Close identity repair after successful primary reconciliation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:24:35 +02:00
codex	6b41a43fa3	Separate Core Hub onboarding from archived apps-pg identities ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:22:29 +02:00
codex	3dc005df1c	Close live inventory migration and prepare workplan identity repair ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:17:42 +02:00
codex	c7b0b3f572	Record prune verification and State Hub sync latency evidence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 02:04:22 +02:00
codex	0349a08e1b	Harden backup credentials and add durable image inventory publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 01:53:24 +02:00
codex	429cc912ed	Finish coding-agent high-risk boundary coverage ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 10:03:54 +02:00
codex	d40eb3c2a9	Finish hub-core credential lane workplan ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 00:28:18 +02:00
codex	382f04412a	Close CCR drift and high-risk policy gaps	2026-08-21 01:29:28 +02:00
codex	1206ed55da	Finish Core Hub private shadow onboarding	2026-08-21 00:51:06 +02:00
codex	90a0192e4f	Record Core Hub lease and network readiness	2026-08-20 23:44:35 +02:00
codex	07ed6217b7	Advance RPF-WP-0021 platform onboarding	2026-08-20 23:31:47 +02:00
codex	cb321deeab	Finish RPF-WP-0019 apps-pg controls and recovery	2026-08-20 22:58:45 +02:00
codex	ac69f90300	feat: prepare core hub platform onboarding	2026-08-20 11:18:30 +02:00
codex	1eb5fa51ed	Finish architecture-cleanup RAILIANCE-WP-0016 T05 ... Item 13 is the restore RESOURCE-WP-0002 already proved. Item 14 retires the dead Bitnami postgresql-ha deploy path and gates Valkey until a consumer exists. Item 17 publishes the versioned S3 consumer-interface index.	2026-08-15 14:43:44 +02:00
codex	625991469a	feat: vend platform-pg-backup-s3 via AppRole ESO ... Policy and AppRole applied. Store Valid, ExternalSecret SecretSynced. Prefix empty. WAL not enabled.	2026-08-14 20:00:15 +02:00
codex	cbc6398583	note: backup bucket policy enforces platform-pg/ prefix	2026-08-14 19:55:53 +02:00