Commit graph

  • 8d878cc4c2 CCR-2026-0029/0030: record positive verification (ExternalSecret synced) main codex 2026-09-23 22:36:41 +02:00
  • 0eefe371db chore(consistency): regenerate WORK-RECORDS codex 2026-09-23 20:19:25 +02:00
  • 1d2f43111e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 20:19:11 +02:00
  • 7bf2df953d RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045 codex 2026-09-23 20:17:42 +02:00
  • fe1665d1d0 CCR-2026-0029/0030: policy applied live (attended, guarded) codex 2026-09-23 20:07:09 +02:00
  • 263605d00a CCR-2026-0029/0030: record founder approval codex 2026-09-23 20:01:06 +02:00
  • 15184aaa01 CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) codex 2026-09-23 20:00:40 +02:00
  • 915a3cacd9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 19:53:52 +02:00
  • b2ebe10849 RPF-WP-0046: periodic ESO database tokens and a daily renewer codex 2026-09-23 19:53:12 +02:00
  • a66f96d0d4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 19:28:15 +02:00
  • 3fbb610d1f Declare live platform-admin role and policies; add attended admin check codex 2026-09-23 19:27:25 +02:00
  • 32ccb1acab chore(consistency): regenerate WORK-RECORDS codex 2026-09-22 22:49:37 +02:00
  • 494d076c6e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-22 22:48:17 +02:00
  • b666301487 Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults codex 2026-09-22 22:47:42 +02:00
  • 8a7ebce5c6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:41:04 +02:00
  • 83fde180a9 Record RPF-WP-0045 T01-T04 done: both ESO stores on Kubernetes auth, 37/37 ExternalSecrets ready. codex 2026-09-21 19:40:45 +02:00
  • 211393a714 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:20:27 +02:00
  • 45c3efa1e4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:19:58 +02:00
  • f8f660c4a5 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 19:19:54 +02:00
  • 237fb04500 RPF-WP-0045: record hub IDs codex 2026-09-21 19:19:37 +02:00
  • 4bf9581200 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:19:30 +02:00
  • 6e399bbe64 RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect codex 2026-09-21 19:18:59 +02:00
  • 2d79c2e4e5 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:15:17 +02:00
  • 489cc42af1 Record RPF-WP-0044-T05: target-revenue adopted (proving period). codex 2026-09-21 19:14:52 +02:00
  • 6eeb826f18 Adopt target-revenue on railiance01 (RPF-WP-0044-T05). codex 2026-09-21 19:13:31 +02:00
  • 035cd32688 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:10:00 +02:00
  • 119277ec93 Record RPF-WP-0044 T02 done and T03 adopted (proving period). codex 2026-09-21 19:09:41 +02:00
  • 182e78852c Adopt openbao-secretstore on railiance01 (RPF-WP-0044-T03). codex 2026-09-21 19:08:48 +02:00
  • 79d7fbfe94 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:06:21 +02:00
  • 4ca88a14f0 RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d. codex 2026-09-21 19:05:56 +02:00
  • c3ebd6dddc Declare railiance01 ArgoCD bootstrap on its own path, automated sync off (RPF-WP-0044-T01). codex 2026-09-21 19:04:15 +02:00
  • 538a3087fe chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:46:29 +02:00
  • 00f650c43c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:45:58 +02:00
  • 75722cc8a9 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 18:45:52 +02:00
  • e1144078fa Write back State Hub IDs for RPF-WP-0044 and regenerate work records. codex 2026-09-21 18:45:33 +02:00
  • 7dd43d5d92 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:45:22 +02:00
  • 288c40b9e9 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 18:45:15 +02:00
  • f1e885aa9e Decide blueprint 5.6 (adopt ArgoCD) and plan phase B adoption on railiance01. codex 2026-09-21 18:44:51 +02:00
  • 0b70765e0a repo.work.assign_missing_identifiers repo-manager 2026-09-21 14:36:11 +02:00
  • adb5a7249c Record the ArgoCD lane as the production change path and plan policy-nexus onboarding. codex 2026-09-21 14:36:08 +02:00
  • ad88639a53 Apply GH-DEC-2026-017 to the layer declaration. codex 2026-09-21 07:35:24 +02:00
  • 9e658be8e3 Reconcile T03 verification and complete guarded native execution codex 2026-09-16 02:12:45 +02:00
  • 5b3041cfb5 Renew T03 requests using Railiance time and bind native execution codex 2026-09-16 01:08:56 +02:00
  • 3bd3a2e87b Record verified production Clock custody and authority acceptance codex 2026-09-15 23:13:13 +02:00
  • e70ef2f32a Implement attended Railiance Clock host key delivery codex 2026-09-15 23:00:20 +02:00
  • 3b11773469 approve Railiance Clock authority custody lane codex 2026-09-15 22:43:15 +02:00
  • b9b9e285d9 propose Railiance Clock authority key custody lane codex 2026-09-15 22:35:21 +02:00
  • be8f18c464 Close RPF-WP-0042 after sitting-requester exchange proof. codex 2026-09-15 20:57:50 +02:00
  • 9ce42da97e Classify sitting-requester exchange failures and retry failed receipts. codex 2026-09-15 20:51:28 +02:00
  • 73178f4ae2 Add sitting-requester create-only token-exchange proof. codex 2026-09-15 20:38:47 +02:00
  • 50f031091c Record sitting-requester custody apply; keep exchange proof open. codex 2026-09-15 20:31:00 +02:00
  • 75e5c1af65 Pin attended OpenBao login to the operator tunnel. codex 2026-09-15 20:27:35 +02:00
  • 4b34c239bc Approve sitting-requester CCRs and add the attended provisioner. codex 2026-09-15 20:08:02 +02:00
  • 6dfb751e60 Close RPF-WP-0029-T02 on operator-attested predecessor unshare. codex 2026-09-15 02:48:15 +02:00
  • f3668f4f0a Retract the public OpenBao Ingress after exact operator confirm. codex 2026-09-15 02:36:25 +02:00
  • 28424a615d Note loopback UI MFA succeeded; keep Ingress retraction gated. codex 2026-09-15 02:33:12 +02:00
  • 66277450e3 Record platform-admin loopback callback already present. codex 2026-09-15 02:27:09 +02:00
  • 041f6bdc51 Preserve writable OIDC fields on the loopback callback update. codex 2026-09-15 02:23:22 +02:00
  • 7496d9fab5 Require an absolute owner command after attended OpenBao login. codex 2026-09-15 02:16:42 +02:00
  • bb1aa85aea repo.work.assign_missing_identifiers repo-manager 2026-09-15 02:08:45 +02:00
  • d2dbc19c25 Allocate sitting-requester CCR pair and record operator gates. codex 2026-09-15 02:08:39 +02:00
  • f05ef49c69 Land RPF-WP-0039 third apps-pg consumer source. codex 2026-09-15 01:29:38 +02:00
  • 0178ec3c6d Classify open workplans with flavor (CUST-WP-0072). codex 2026-09-14 15:50:47 +02:00
  • 32095a16fa Refresh WORK-RECORDS.md including RPF-WP-0041. codex 2026-09-14 11:40:31 +02:00
  • ffc7577bed Confirm no platform provisioning from the 105m remainder. codex 2026-09-14 10:34:27 +02:00
  • cb60caf55d Residual from STATE-WP-0091: no platform provisioning from 105m. codex 2026-09-14 10:13:48 +02:00
  • 68b0a37f7d Record attended login recovery and remaining T03 prerequisites codex 2026-09-14 03:55:42 +02:00
  • e0e4d88234 Retain attended preflight failure diagnostics before a safe retry codex 2026-09-14 03:46:29 +02:00
  • 68a059c730 Prepare contained native execution of the three approved T03 actions codex 2026-09-14 03:21:49 +02:00
  • 703d552ee7 Provision scoped T03 requester custody and native requests codex 2026-09-14 02:47:32 +02:00
  • 525664efa3 Verify scoped approval client delivery through attended reader session codex 2026-09-14 01:46:45 +02:00
  • bbff2bfb93 Bind secrets-engine approval reader to confirmed operator group codex 2026-09-14 01:30:23 +02:00
  • 817c122d07 Close factor credential expiry and recovery acceptance for P05 codex 2026-09-13 22:20:14 +02:00
  • a704a72b6e Record completed P04 recovery rollout and acceptance codex 2026-09-13 21:19:13 +02:00
  • 9575b51d6e Implement audited lost-factor recovery and track remaining P04 acceptance codex 2026-09-13 17:28:45 +02:00
  • 0c4db1ef0b repo.work.assign_missing_identifiers repo-manager 2026-09-13 16:26:59 +02:00
  • 2e2c31d237 Establish scoped KeyCape factor custody and verified automatic renewal codex 2026-09-13 16:25:33 +02:00
  • b75729b799 Record verified independent factory audit readback codex 2026-09-11 16:35:14 +02:00
  • 005c68eb4c Record native sender acceptance and retained audit readback gate codex 2026-09-11 14:23:07 +02:00
  • 9654f9e8cf Exercise fsGroup startup through the corrected producer helper codex 2026-09-11 12:41:50 +02:00
  • aaa4b8e686 Retain bounded native probe failure diagnostics before cleanup codex 2026-09-11 12:37:29 +02:00
  • 426a0d5829 Separate producer checks from attended audit readback codex 2026-09-11 12:16:49 +02:00
  • 1770a60675 feat: verify native factory sender delivery and outbox replay codex 2026-09-11 11:31:35 +02:00
  • 1e44e6e71e chore: refresh platform delivery work record index codex 2026-09-11 10:32:18 +02:00
  • c9fd9fc640 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 10:31:35 +02:00
  • 1ec5b587db docs: accept native factory audit sender delivery codex 2026-09-11 10:31:15 +02:00
  • 47223007ba chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 10:08:04 +02:00
  • df5980a873 docs: retain successful custody and exact delivery login wait codex 2026-09-11 10:07:47 +02:00
  • 44314cad37 feat: deliver approved factory audit sender custody codex 2026-09-11 09:38:27 +02:00
  • fe1b1c5fe2 Refresh generated work index after sender admission progress codex 2026-09-11 07:29:10 +02:00
  • 8945759655 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 07:27:41 +02:00
  • 290e2b51fd Record live receiver gate and isolate readiness from attestation jobs codex 2026-09-11 07:26:16 +02:00
  • 5cc325b744 Record operator approval of the two factory audit sender lanes codex 2026-09-11 06:47:35 +02:00
  • 0adc5b0e49 Refresh index for factory audit custody task codex 2026-09-11 02:04:20 +02:00
  • 7aa061c549 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 02:02:55 +02:00
  • 172e982e33 repo.work.assign_missing_identifiers repo-manager 2026-09-11 02:02:12 +02:00
  • bfe65a5b05 Prepare scoped factory audit custody and enforce receiver compatibility codex 2026-09-11 02:01:57 +02:00
  • d3a502b45c docs: retain approval client consumer procedure return codex 2026-09-10 12:48:38 +02:00
  • 67c5a7a508 Refresh the generated work record index codex 2026-09-10 09:04:13 +02:00
  • 04c304ca54 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-10 09:03:40 +02:00