73 commits

Author	SHA1	Message	Date
codex	31386c8e63	Validate OpenBao snapshot evidence and record assurance closure gates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 15:24:58 +02:00
codex	a867ec269a	Record archive recovery lifecycle and validate receipt provenance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 14:53:15 +02:00
codex	445f1361dc	Advance blocked assurance and operator callback work ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 14:16:49 +02:00
codex	a3ca4b708f	Verify full and essentials recovery and implement bounded retention tooling ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 11:10:50 +02:00
codex	11322a5256	Bind essentials recovery to explicit manifest and verified offsite provenance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 09:25:26 +02:00
codex	4707bf08d7	Implement bounded primary archive transfer and explicit essentials capture ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 08:00:59 +02:00
codex	a9c1da4bd7	Bound rejected backup fixture cleanup to successful replacement recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 01:05:27 +02:00
codex	63b5d6d426	Restore contained attended browser launch on WSL without xdg-utils ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-06 00:44:08 +02:00
codex	0cca68da96	Prepare isolated offsite restore and stream large backup transfers ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:18:05 +02:00
codex	d0c7249a0d	Reject unfinished or truncated Forgejo backup archives before encryption ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 22:10:22 +02:00
codex	8fb4407832	Prepare dedicated Backup account cutover with quota and recovery verification ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 20:35:13 +02:00
codex	5ef016be01	Contain backup upload credentials and prepare provider recovery gates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 19:21:06 +02:00
codex	3759850cc4	Document recovered ESO lanes and recognize explicit invalid-token responses ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:51:40 +02:00
codex	bd2e6e86b8	Prepare bounded Kubernetes authentication recovery for three ESO lanes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 18:38:19 +02:00
codex	9c86983f1a	Allow bounded ESO token self-validation and cleanup ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 16:47:26 +02:00
codex	80793afe4f	Pin signing-lane writes to the verified primary cluster ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 16:41:46 +02:00
codex	5d288938f7	feat: prepare scoped State Hub preflight signing custody and rotation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102	2026-09-05 16:38:26 +02:00
codex	a46a6d8213	Prepare bounded State Hub preflight signing lane ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:50:27 +02:00
codex	234b1b559f	Implement S3 service assurance and admission checks ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 11:43:55 +02:00
codex	da42f764c0	Add failure-safe cluster image capture hook ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 10:04:38 +02:00
codex	f637989a69	Refuse prune apply when requested image inventories are unavailable ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 02:00:50 +02:00
codex	0349a08e1b	Harden backup credentials and add durable image inventory publication ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883	2026-09-05 01:53:24 +02:00
codex	62423fd092	Activate Policy Nexus source credential lane ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-09-01 01:35:48 +02:00
codex	a6d47c51cc	Record Policy Nexus metadata apply and diagnose bootstrap ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-09-01 00:18:15 +02:00
codex	1b85a3ef3d	Add attended Policy Nexus source bootstrap ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663	2026-08-31 23:24:05 +02:00
codex	d18649fc6e	feat(RAILIANCE-WP-0027): add contained callback role update ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4	2026-08-23 14:37:01 +02:00
codex	c9d02147d3	Adopt canonical flex-auth credential checks ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e56-e4ad-71a2-b3e2-b6193e0d8093	2026-08-23 14:03:40 +02:00
codex	2a5c002aa5	Prepare canonical custody for audit E2 third attempt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 23:23:41 +02:00
codex	30e6edc236	Add versioned ephemeral custody lifecycle ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 21:56:42 +02:00
codex	d239ed33c3	Harden remote kubectl argument quoting ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 21:25:20 +02:00
codex	f135c0af35	Bind audit E2 retry projection to new engagement ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 20:56:58 +02:00
codex	891d90e6c9	add attended custody for audit-core E2 retry ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de	2026-08-22 20:49:11 +02:00
codex	a557208a4a	Add direct WP-0024 load driver handoff ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 16:17:03 +02:00
codex	abf8855ae1	Include platform owner in WP-0024 receipts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:59:59 +02:00
codex	d8c0cd38a7	Report WP-0024 approvals by task ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:57:52 +02:00
codex	0d9cebedea	Add direct WP-0024 owner review interface ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:15:02 +02:00
codex	3f9e4535d1	Harden WP-0024 recovery execution gates ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 14:00:18 +02:00
codex	bd25f7fa40	Add audit recovery exercise preflights ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 13:16:13 +02:00
codex	864cc20b96	Add attended Whitehat E2 credential projection ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 12:59:38 +02:00
codex	429cc912ed	Finish coding-agent high-risk boundary coverage ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 10:03:54 +02:00
codex	bb7cfcb184	feat: add hub-core database lease projections	2026-08-21 17:30:44 +02:00
codex	382f04412a	Close CCR drift and high-risk policy gaps	2026-08-21 01:29:28 +02:00
codex	1206ed55da	Finish Core Hub private shadow onboarding	2026-08-21 00:51:06 +02:00
codex	07ed6217b7	Advance RPF-WP-0021 platform onboarding	2026-08-20 23:31:47 +02:00
codex	ac69f90300	feat: prepare core hub platform onboarding	2026-08-20 11:18:30 +02:00
codex	dc4245361d	Finish RPF-WP-0018; RPF-WP-0019 repository-complete ... RPF-WP-0018 closed: all seven tasks done. The provider-declaration finding was adopted upstream and its canonical form is the provider: block in tenancy.yaml; adaptive-pricing declined the standing co-signature and supplied typed tier minima instead, recorded in ADR-0002. Three corrections against our own output are recorded in the documents rather than edited away. RPF-WP-0019 T03 done (ceiling of three, memory binding, apps-pg-2 named as overflow, enforced by make apps-pg-verify-capacity). T01/T02 are repository-complete: backup target, retention, per-consumer connection limits, role timeouts and Burstable resources are declared in source and published in s3-consumer-interfaces 1.1.0 before rollout. They stay in progress because no live application, backup success or restore proof exists, and declared configuration is not a section 13 artifact. T04 waits on that window. apps-pg R reason corrected to say the target is declared-not-applied rather than absent. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-18 13:35:04 +02:00
codex	34a3123799	Finish RAILIANCE-WP-0017 consumption-mode enforcement ... Read the resource-control open/restricted signal and refuse new orders that would exceed a restricted entity's published allowance. Open and missing signals stay unchanged. Safety paths admit with an exception.	2026-08-15 14:56:02 +02:00
codex	dfa6373985	Close RAILIANCE-WP-0015-T06 rapp credential-lane binding ... Document the one recipe a new rapp uses to acquire runtime secrets: standing KV secrets bind through a CCR target.rapp, leases through grant rapp_id. Stamp the existing postgres grants and the qonto workload CCR. Gate, delivery, and revocation are unchanged.	2026-08-14 00:47:28 +02:00
codex	b7aef386d5	Stabilize credential-change test suite (RAILIANCE-WP-0014) ... Five failures in full credential test discovery, none of them broker regressions: - CCR-2026-0009 referenced a policy file that was never added, and used a schema-invalid access_frontdoor.readiness value. Add the least-privilege workload-kv-read-qonto-assistant.hcl (read-only on tenants/binky/qonto-api) and set readiness to pending-review. The lane stays proposed and non-resolvable. - Three refusal tests used the live CCR-2026-0002 file as their "unapproved CCR" fixture. That lane is now approved, applied and active, so the gates correctly permitted it and the tests failed; applier-apply then walked into its interactive confirmation prompt and raised EOFError under a non-interactive runner. Add an unapproved_ccr() helper that materializes a normalized temp copy so approval state is no longer read off a mutable production artifact. - The approve/unconfirmed-claim test demoted an active CCR to approved while leaving resolvable=true, tripping a correct validation rule. Build it from the same helper. No gate, blocker, validation rule, or grant semantic was changed. Verified: credential discovery 52/52 and full discovery 61/61 pass non-interactively, make credential-change-validate passes all nine CCRs, the grant catalog validates, and both audit-core openbao-database-credential grants retain exec-env-only delivery and revoke-on-exec-exit. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-11 10:28:10 +02:00
codex	9f6bdffec4	Broker audit-core dynamic database credentials	2026-08-10 19:36:30 +02:00