coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 6858bef858 oidc-service-client 0.1 owner review; draft CCR-2026-0060/0061 (proposed) main codex 2026-10-31 23:03:46 +01:00
  • 7bdf1996f0 CCR-2026-0059 verified: executor journey passed live through the read role codex 2026-10-31 20:50:06 +01:00
  • 702ca22069 CCR-2026-0059 applied, CCR-2026-0058 policy set up; RPF-WP-0069-T04 done codex 2026-10-31 19:49:11 +01:00
  • b4bafb0df8 CCR-2026-0058/0059: binding confirmed (sso/nk-bind-executor uid bd15569c) codex 2026-10-31 19:38:47 +01:00
  • 678998f5b9 RPF-WP-0069-T04: CCR-2026-0059 approved; waits for the ServiceAccount codex 2026-10-31 19:07:05 +01:00
  • 831a0f9c98 CCR-2026-0059: approved (platform-owner, net-kingdom-owner) codex 2026-10-31 19:06:52 +01:00
  • 98a8b08bf6 CCR-2026-0059: standing reader (founder decision 2026-10-31) codex 2026-10-31 19:00:03 +01:00
  • c9b68ea4e4 CCR-2026-0059 (proposed): bounded executor reads the syn-journey identity codex 2026-10-31 18:47:31 +01:00
  • d0ff5349db CCR-2026-0058: re-approved with the corrected policy (platform-owner, net-kingdom-owner) codex 2026-10-31 16:46:32 +01:00
  • c20bf329fd CCR-2026-0058: drop required_parameters from the write policy; back to proposed for re-approval codex 2026-10-31 16:24:47 +01:00
  • 331c4af2bf RPF-WP-0069: State Hub task ids codex 2026-10-31 15:29:11 +01:00
  • 2f69a4443d CCR-2026-0058: net-kingdom-owner approval; RPF-WP-0069 ready, T02 done, T06 cancelled, T07 approve-tool fix codex 2026-10-31 15:27:50 +01:00
  • 69cc133e9d CCR-2026-0058: approved (platform-owner, net-kingdom-owner) codex 2026-10-31 15:26:49 +01:00
  • b70ba57a4e CCR-2026-0058: window-scoped write role and bind self-rotation (founder decisions 2026-10-31) codex 2026-10-31 15:26:45 +01:00
  • 88bafd8848 RPF-WP-0069: State Hub task ids codex 2026-10-31 14:57:23 +01:00
  • 8ac066f299 RPF-WP-0069: qualify waits (decisions, dependency, blocking reasons) codex 2026-10-31 14:56:18 +01:00
  • dff35c15d8 RPF-WP-0069: blocked_on uses the hub enum; reason in blocking_reason codex 2026-10-31 14:51:56 +01:00
  • 2023a94408 RPF-WP-0069: route human gates to hub decisions (NK-WP-0056-T02 follow-up) codex 2026-10-31 14:48:23 +01:00
  • 03a74e839c RPF-WP-0069: State Hub ids written back by fix-consistency codex 2026-10-31 14:44:00 +01:00
  • 8b57d270de RPF-WP-0069: answer NK-WP-0056-T02; add workload-kv-write-next-version; CCR-2026-0058 (proposed) codex 2026-10-31 14:21:35 +01:00
  • c5f9770c97 CCR-2026-0057: verified (setup and verify passed; live synthetic journey at aal2; net-kingdom 661ab6a) codex 2026-10-31 13:33:37 +01:00
  • 2ac97865da CCR-2026-0057: approved (platform-owner, net-kingdom-owner) codex 2026-10-31 12:50:43 +01:00
  • 0f012dbe28 CCR-2026-0057 (proposed): NetKingdom synthetic journey identity custody codex 2026-10-31 12:42:33 +01:00
  • 93e84dbd34 Persist the SMTP admission human review gate in source codex 2026-10-31 12:03:45 +01:00
  • 3be4311faf Bind SMTP admission workplan to the native Railiance topic codex 2026-10-31 12:02:27 +01:00
  • e77f3989b4 Prepare supervised email-connect SMTP foundation and projection codex 2026-10-31 12:00:57 +01:00
  • f7c01d4000 repo.work.assign_missing_identifiers repo-manager 2026-10-31 11:55:25 +01:00
  • 1524c54570 Prepare guarded email-connect platform SMTP reader admission codex 2026-10-31 11:54:53 +01:00
  • ca2b5e3385 CCR-2026-0055: verified (setup, verify and attended write-through passed; net-kingdom ad7d1cd) codex 2026-10-31 11:19:36 +01:00
  • 04d9dc87ac CCR-2026-0055: approved (platform-owner, net-kingdom-owner) codex 2026-10-31 11:11:12 +01:00
  • 8cab281ffc CCR-2026-0055: state the gate precisely (attended pi-admin, MFA login proves the write) codex 2026-10-31 11:07:05 +01:00
  • 2d4a3838bf CCR-2026-0055 (proposed) and request type attended-service-credential-delivery codex 2026-10-31 11:03:44 +01:00
  • 674a7132d0 CCR-2026-0054: verified (setup, ESO delivery, env rollout, clear-password and verify passed; net-kingdom a656739) codex 2026-10-31 10:52:22 +01:00
  • 5d87acd184 CCR-2026-0054: approved (platform-owner, net-kingdom-owner) and binding confirmed codex 2026-10-31 10:37:02 +01:00
  • d20ebe7bca CCR-2026-0054 (proposed): NetKingdom svc-keycape directory bind custody and ESO delivery codex 2026-10-31 10:31:56 +01:00
  • 5dd1d6875b CCR-2026-0053: verified (setup, ESO delivery and verify passed; net-kingdom 7f37e25) codex 2026-10-31 10:11:39 +01:00
  • bcfbe29b24 CCR-2026-0053: approved (platform-owner, net-kingdom-owner) and binding confirmed codex 2026-10-31 10:04:29 +01:00
  • bae2df0d31 CCR-2026-0053 (proposed): NetKingdom svc-authelia directory bind custody and ESO delivery codex 2026-10-31 09:19:09 +01:00
  • 96d4d319be Refresh Coulomb protected recovery point after date correction codex 2026-10-31 08:43:05 +01:00
  • 5d2f43d6d9 CCR-2026-0052: verified (setup, ESO delivery and verify passed; net-kingdom 87e57aa) codex 2026-10-30 23:24:11 +01:00
  • a715bfa468 CCR-2026-0052: approved (platform-owner, net-kingdom-owner) and binding confirmed codex 2026-10-30 23:06:46 +01:00
  • 112c04170d CCR-2026-0052 (proposed): NetKingdom svc-provisioner directory bind custody and ESO delivery codex 2026-10-30 22:54:30 +01:00
  • 09f4fd33cb Retain verified recovery proof independently and bind the protected point codex 2026-10-29 22:49:33 +01:00
  • e1918b3f88 Automate timed recovery from the protected provider kit and separate escrow codex 2026-10-29 22:43:05 +01:00
  • 3e8155878b Require live versioning and absent expiry before protected kit publication codex 2026-10-29 22:34:45 +01:00
  • 3c98ca96bb Add protected kit publication and independent version retrieval codex 2026-10-29 22:33:19 +01:00
  • b16f8bab8c Add immutable Coulomb recovery mirroring through scoped APIs codex 2026-10-29 22:25:41 +01:00
  • 7e0b7d9062 Refresh recovery task gates after native API admission codex 2026-10-29 22:15:59 +01:00
  • 849f3947dc Establish Coulomb scoped recovery API custody and native boundaries codex 2026-10-29 22:13:06 +01:00
  • ccc0f8b578 Compare full native bucket policies independent of array order codex 2026-10-29 21:56:10 +01:00
  • 61a82ac74c Fit Coulomb archive policy within native statement limit codex 2026-10-29 21:55:33 +01:00
  • 12f2056272 Prepare scoped recovery resources and bounded construction renewal codex 2026-10-29 21:52:55 +01:00
  • 87a8a5cbdf repo.work.assign_missing_identifiers repo-manager 2026-10-28 18:49:04 +01:00
  • 7aa38fcacd Prepare bounded Coulomb API identity bootstrap with private restartable custody codex 2026-10-28 12:43:05 +01:00
  • bd8ca57dc9 RPF-WP-0067: owner answers for NK-WP-0040-T02 and value-safe identity metadata exporter for NK-WP-0054-T04 codex 2026-10-28 09:52:15 +01:00
  • 2d8a554c10 Bind Coulomb routine recovery access to governed scoped APIs codex 2026-10-28 01:34:12 +01:00
  • 1eca6d00c7 RPF-WP-0064-T10: done; production SSO-down walk passed codex 2026-10-28 01:02:50 +01:00
  • 86c92792b2 RPF-WP-0064-T10: bridge status takes no tunnel argument codex 2026-10-28 00:59:41 +01:00
  • f00298cd44 Record admitted Coulomb independent recovery custody and execution preflight codex 2026-10-28 00:59:05 +01:00
  • 95b5a19898 NK-WP-0055-T16: guarded revoke of the held initial root token for production entry codex 2026-10-28 00:54:59 +01:00
  • 42c06d8db4 RPF-WP-0064-T10: break-glass drill drilled and independently verified codex 2026-10-28 00:47:35 +01:00
  • 3727f8bc7a RPF-WP-0064-T10: SSO-down walk checks the live break-glass listener (200 on 8210, 405 on 8200) codex 2026-10-28 00:08:52 +01:00
  • a2da4085e0 RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter codex 2026-10-28 00:02:10 +01:00
  • 05ff9f8678 RPF-WP-0064, RPF-WP-0066: record hub ids codex 2026-10-27 23:33:59 +01:00
  • 8016f56f18 NK-WP-0055-T13: OpenBao break-glass ceremony with SSO down; RPF-WP-0064-T10 drill plan codex 2026-10-27 23:31:58 +01:00
  • e3bc1ab32b RPF-WP-0065-T04: done; founder applied and verified the platform-admin aal2 binding codex 2026-10-27 23:23:11 +01:00
  • bedab6f5ab RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane codex 2026-10-27 22:46:31 +01:00
  • 87a488cc66 RPF-WP-0066: OpenBao durable audit shipping, scheduled snapshots, live conformance (NK-WP-0055-T11/T12) codex 2026-10-27 22:31:57 +01:00
  • 4583b22fd6 repo.work.assign_missing_identifiers repo-manager 2026-10-27 22:22:58 +01:00
  • 98b1190765 Admit Coulomb backup node execution and verify pair delivery codex 2026-10-27 22:21:57 +01:00
  • 565815006c RPF-WP-0064: owner answers for NK-WP-0049-T43 (JWT trust fields, phase B names, phase A acceptance) codex 2026-10-27 21:40:59 +01:00
  • 2bbf1ffd83 RPF-WP-0064: phase B plan and confirmation for net-kingdom NK-WP-0049-T43 codex 2026-10-27 21:15:22 +01:00
  • 8f3b4a7e85 RPF-WP-0065: record hub ids codex 2026-10-24 23:53:35 +02:00
  • bca66d1d2e RPF-WP-0065: simplify aal2 rollback commands codex 2026-10-24 23:52:35 +02:00
  • 2126457a16 RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054) codex 2026-10-24 23:49:27 +02:00
  • bab4f2ca6a RPF-WP-0064-T07/T08: original OpenBao restored in isolation and verified; evidence handed off codex 2026-10-24 11:41:45 +02:00
  • 7084b57d57 RPF-WP-0064-T07: in-memory /openbao/audit for the restored file audit device; native reseal regression codex 2026-10-24 11:22:00 +02:00
  • 624843e122 RPF-WP-0064-T07: record attempt -01 (unsealed, no leader in 60 s); leader wait 180 s with bounded diagnostics codex 2026-10-24 10:54:02 +02:00
  • 1701a3fa2a RPF-WP-0064-T06: pin the live production OpenBao image digest in the restore adapter codex 2026-10-24 10:17:11 +02:00
  • fb0b50234d RPF-WP-0064-T05: record founder acceptance of the T02 design choices codex 2026-10-23 21:06:37 +02:00
  • 39bf724a14 RPF-WP-0064-T04: reference retained synthetic rehearsal receipt by hash codex 2026-10-23 20:50:44 +02:00
  • a61a07cf15 RPF-WP-0064-T04: native synthetic rehearsal; T02-T04 done codex 2026-10-23 20:49:40 +02:00
  • 7f67c9c244 RPF-WP-0064-T03: v2 restore receipt and independent verifier codex 2026-10-23 20:49:35 +02:00
  • 0cc3281ab3 RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A) codex 2026-10-23 20:49:24 +02:00
  • 76b45e0e16 RPF-WP-0064: record hub ids from fix-consistency codex 2026-10-23 20:16:35 +02:00
  • 3894dc7c54 RPF-WP-0064: propose isolated original-OpenBao restore for SECRETS-WP-0015-T04 codex 2026-10-23 20:15:24 +02:00
  • 1f8fbc7584 Point bao-notice at the rapp-openbao copy of the page. codex 2026-10-23 17:42:39 +02:00
  • e594350eff Pin the ops-mason-builder Application to its introducing commit codex 2026-10-22 08:48:44 +02:00
  • bd6660a916 Add the scoped ops-mason-builder ClusterRole codex 2026-10-22 08:48:15 +02:00
  • c27f50b00e Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) codex 2026-10-22 01:00:57 +02:00
  • d0d0db7c52 target-revenue: pin f110a4e (wave-2 requests, TREV-WP-0016) codex 2026-10-22 00:41:21 +02:00
  • 8bf107eb85 Retire gitea-db Make targets (complete 4a91b85; RAPPS-WP-0019-T05) codex 2026-10-22 00:09:03 +02:00
  • 7fbba919c5 RPF-WP-0063-T01: prepare wave-2 requests (ESO, openbao UI gateway, forgejo-db) codex 2026-10-22 00:05:54 +02:00
  • 30c48cb993 issue-core: pin rapp-issue-core 11af3cb (wave-2 requests, ISSUE-WP-0008-T01) codex 2026-10-22 00:04:50 +02:00
  • 4a91b8579d Retire gitea-db targets and manifest (RAPPS-WP-0019-T05) codex 2026-10-21 23:47:06 +02:00
  • 51d5247156 issue-core: pin rapp-issue-core 805e124 (forge-http URL, RAPPS-WP-0019 stage C) codex 2026-10-21 23:35:08 +02:00
  • 2c5d3b327e issue-core: pin rapp-issue-core b60c194 (forge NetworkPolicy by instance label, RAPPS-WP-0019 stage A) codex 2026-10-21 23:17:33 +02:00
  • c67fb49723 chore(consistency): write back State Hub ids codex 2026-10-21 12:29:21 +02:00
  • cfd9fa57ae RPF-WP-0063: wave-2 resource right-sizing receiving workplan codex 2026-10-21 08:48:00 +02:00
  • 1a6d83ace9 CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project codex 2026-10-21 08:41:37 +02:00