coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
182 commits 1 branch 0 tags 692 KiB
Commit graph

14 commits

Author SHA1 Message Date
tegwick
86209fa90c CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Enable tenant commercial secrets: applier accepts mount tenants/, apply
policy and OIDC role for company-email IMAP (metadata only; values are
founder Red provision). Extend agent-high-risk-boundary for the path.
 2026-07-17 00:09:28 +02:00
tegwick
25fc47e5f2 Add CCR-2026-0006 Forgejo admin PAT OpenBao lane 
Establish proposed workload-kv-read custody for the Forgejo site-admin
PAT at platform/workloads/forgejo/forgejo-admin, sibling to forgejo-mailer.
OIDC workstation fetch mirrors the railiance-backup-offsite pattern.
 2026-07-12 16:01:53 +02:00
tegwick
839a4418a9 Add reuse-surface secrets rotation runbook (RAILIANCE-WP-0011-T04)
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Has been cancelled
Details 
Document OpenBao patch, ESO force-sync, hub rollout, and Forgejo webhook
reconcile; extend credential-lane lifecycle for CCR-2026-0005; finish workplan.
 2026-07-08 00:01:21 +02:00
tegwick
31a5de81d0 Complete RAILIANCE-WP-0011-T03 catalog migration for CCR-2026-0005
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
Activate CCR front door, document reuse-surface lane in workload-kv-access-lanes,
and mark consumer handoff task done.
 2026-07-07 22:38:45 +02:00
tegwick
0055e8f3f7 Establish railiance backup credentials in OpenBao (CCR-2026-0004).
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details 
Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery
escrow at platform/workloads/railiance/backup/offsite-lane. Apply read
policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup
to load credentials from OpenBao when env is unset.
 2026-07-07 17:16:30 +02:00
tegwick
a95236d2e5 Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
tegwick
3527bc1cae Request groups scope for whynot OIDC role 2026-06-28 13:23:14 +02:00
tegwick
adf865611c Mark whynot lane applied pending verification 2026-06-28 12:53:39 +02:00
tegwick
271aa94642 Record whynot OpenBao lane apply evidence 2026-06-28 12:41:39 +02:00
tegwick
eb24e04b71 Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00
tegwick
0e3ea30c75 Propose OpenBao automation delegation 2026-06-28 00:44:23 +02:00
tegwick
52687d8b3e Confirm whynot credential binding 2026-06-27 23:45:31 +02:00
tegwick
aee0dcefad Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
tegwick
85a4278a55 Add credential approval workflow plan 2026-06-27 22:48:24 +02:00