coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • c9bf8c90c9 Fix callback-prune test fixture for the post-prune declaration main codex 2026-09-24 01:16:08 +02:00
  • bcf6f9bf12 Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config codex 2026-09-24 01:14:43 +02:00
  • df4cbae2e9 chore(consistency): regenerate WORK-RECORDS codex 2026-09-24 00:57:57 +02:00
  • 9f4dca30b9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 00:57:55 +02:00
  • c3486be3c2 RPF-WP-0047 done: bao.coulomb.social serves a trusted static notice codex 2026-09-24 00:57:34 +02:00
  • 153951c09f RPF-WP-0047: pin bao-notice to 9ee20967ca codex 2026-09-24 00:56:23 +02:00
  • 9ee20967ca RPF-WP-0047: HSTS for bao.coulomb.social only (no includeSubDomains) codex 2026-09-24 00:56:22 +02:00
  • a960bc4128 RPF-WP-0047: pin bao-notice to 8cd7615eea codex 2026-09-24 00:54:40 +02:00
  • 8cd7615eea RPF-WP-0047: allow Traefik to reach the cert-manager HTTP-01 solver (8089) codex 2026-09-24 00:54:40 +02:00
  • 7ff598f5eb chore(consistency): regenerate WORK-RECORDS codex 2026-09-24 00:52:52 +02:00
  • 1bd291bd42 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 00:52:50 +02:00
  • 3ef4a35284 RPF-WP-0047: workplan and railiance01 Application (pinned 960ed09) codex 2026-09-24 00:52:26 +02:00
  • 960ed0914f RPF-WP-0047: static notice page manifests for bao.coulomb.social codex 2026-09-24 00:52:07 +02:00
  • 7f25af3cb1 Add attended prune of retired bao.coulomb.social callbacks from platform-admin codex 2026-09-24 00:49:39 +02:00
  • 85f6a14892 chore(consistency): regenerate WORK-RECORDS codex 2026-09-24 00:48:48 +02:00
  • e7b6ac2905 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 00:48:47 +02:00
  • 52224b84f8 RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished codex 2026-09-24 00:48:24 +02:00
  • 8f7aa1bb77 chore(consistency): regenerate WORK-RECORDS codex 2026-09-24 00:42:56 +02:00
  • 5b46112547 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 00:42:54 +02:00
  • 29ad9d7838 RPF-WP-0046-T03/T05 done: periodic ESO DB tokens live, consumers restarted codex 2026-09-24 00:42:35 +02:00
  • 2ee3cac0ef chore(consistency): regenerate WORK-RECORDS codex 2026-09-24 00:39:33 +02:00
  • 00a461c7f3 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 00:39:21 +02:00
  • 1918128f8e RPF-WP-0046-T04 done: renewer adopted, first run renewed all five lanes codex 2026-09-24 00:38:59 +02:00
  • 8d878cc4c2 CCR-2026-0029/0030: record positive verification (ExternalSecret synced) codex 2026-09-23 22:36:41 +02:00
  • 0eefe371db chore(consistency): regenerate WORK-RECORDS codex 2026-09-23 20:19:25 +02:00
  • 1d2f43111e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 20:19:11 +02:00
  • 7bf2df953d RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045 codex 2026-09-23 20:17:42 +02:00
  • fe1665d1d0 CCR-2026-0029/0030: policy applied live (attended, guarded) codex 2026-09-23 20:07:09 +02:00
  • 263605d00a CCR-2026-0029/0030: record founder approval codex 2026-09-23 20:01:06 +02:00
  • 15184aaa01 CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed) codex 2026-09-23 20:00:40 +02:00
  • 915a3cacd9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 19:53:52 +02:00
  • b2ebe10849 RPF-WP-0046: periodic ESO database tokens and a daily renewer codex 2026-09-23 19:53:12 +02:00
  • a66f96d0d4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 19:28:15 +02:00
  • 3fbb610d1f Declare live platform-admin role and policies; add attended admin check codex 2026-09-23 19:27:25 +02:00
  • 32ccb1acab chore(consistency): regenerate WORK-RECORDS codex 2026-09-22 22:49:37 +02:00
  • 494d076c6e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-22 22:48:17 +02:00
  • b666301487 Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults codex 2026-09-22 22:47:42 +02:00
  • 8a7ebce5c6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:41:04 +02:00
  • 83fde180a9 Record RPF-WP-0045 T01-T04 done: both ESO stores on Kubernetes auth, 37/37 ExternalSecrets ready. codex 2026-09-21 19:40:45 +02:00
  • 211393a714 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:20:27 +02:00
  • 45c3efa1e4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:19:58 +02:00
  • f8f660c4a5 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 19:19:54 +02:00
  • 237fb04500 RPF-WP-0045: record hub IDs codex 2026-09-21 19:19:37 +02:00
  • 4bf9581200 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:19:30 +02:00
  • 6e399bbe64 RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect codex 2026-09-21 19:18:59 +02:00
  • 2d79c2e4e5 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:15:17 +02:00
  • 489cc42af1 Record RPF-WP-0044-T05: target-revenue adopted (proving period). codex 2026-09-21 19:14:52 +02:00
  • 6eeb826f18 Adopt target-revenue on railiance01 (RPF-WP-0044-T05). codex 2026-09-21 19:13:31 +02:00
  • 035cd32688 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:10:00 +02:00
  • 119277ec93 Record RPF-WP-0044 T02 done and T03 adopted (proving period). codex 2026-09-21 19:09:41 +02:00
  • 182e78852c Adopt openbao-secretstore on railiance01 (RPF-WP-0044-T03). codex 2026-09-21 19:08:48 +02:00
  • 79d7fbfe94 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 19:06:21 +02:00
  • 4ca88a14f0 RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d. codex 2026-09-21 19:05:56 +02:00
  • c3ebd6dddc Declare railiance01 ArgoCD bootstrap on its own path, automated sync off (RPF-WP-0044-T01). codex 2026-09-21 19:04:15 +02:00
  • 538a3087fe chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:46:29 +02:00
  • 00f650c43c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:45:58 +02:00
  • 75722cc8a9 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 18:45:52 +02:00
  • e1144078fa Write back State Hub IDs for RPF-WP-0044 and regenerate work records. codex 2026-09-21 18:45:33 +02:00
  • 7dd43d5d92 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 18:45:22 +02:00
  • 288c40b9e9 chore(consistency): renormalize lifecycle state [auto] custodian-sync 2026-09-21 18:45:15 +02:00
  • f1e885aa9e Decide blueprint 5.6 (adopt ArgoCD) and plan phase B adoption on railiance01. codex 2026-09-21 18:44:51 +02:00
  • 0b70765e0a repo.work.assign_missing_identifiers repo-manager 2026-09-21 14:36:11 +02:00
  • adb5a7249c Record the ArgoCD lane as the production change path and plan policy-nexus onboarding. codex 2026-09-21 14:36:08 +02:00
  • ad88639a53 Apply GH-DEC-2026-017 to the layer declaration. codex 2026-09-21 07:35:24 +02:00
  • 9e658be8e3 Reconcile T03 verification and complete guarded native execution codex 2026-09-16 02:12:45 +02:00
  • 5b3041cfb5 Renew T03 requests using Railiance time and bind native execution codex 2026-09-16 01:08:56 +02:00
  • 3bd3a2e87b Record verified production Clock custody and authority acceptance codex 2026-09-15 23:13:13 +02:00
  • e70ef2f32a Implement attended Railiance Clock host key delivery codex 2026-09-15 23:00:20 +02:00
  • 3b11773469 approve Railiance Clock authority custody lane codex 2026-09-15 22:43:15 +02:00
  • b9b9e285d9 propose Railiance Clock authority key custody lane codex 2026-09-15 22:35:21 +02:00
  • be8f18c464 Close RPF-WP-0042 after sitting-requester exchange proof. codex 2026-09-15 20:57:50 +02:00
  • 9ce42da97e Classify sitting-requester exchange failures and retry failed receipts. codex 2026-09-15 20:51:28 +02:00
  • 73178f4ae2 Add sitting-requester create-only token-exchange proof. codex 2026-09-15 20:38:47 +02:00
  • 50f031091c Record sitting-requester custody apply; keep exchange proof open. codex 2026-09-15 20:31:00 +02:00
  • 75e5c1af65 Pin attended OpenBao login to the operator tunnel. codex 2026-09-15 20:27:35 +02:00
  • 4b34c239bc Approve sitting-requester CCRs and add the attended provisioner. codex 2026-09-15 20:08:02 +02:00
  • 6dfb751e60 Close RPF-WP-0029-T02 on operator-attested predecessor unshare. codex 2026-09-15 02:48:15 +02:00
  • f3668f4f0a Retract the public OpenBao Ingress after exact operator confirm. codex 2026-09-15 02:36:25 +02:00
  • 28424a615d Note loopback UI MFA succeeded; keep Ingress retraction gated. codex 2026-09-15 02:33:12 +02:00
  • 66277450e3 Record platform-admin loopback callback already present. codex 2026-09-15 02:27:09 +02:00
  • 041f6bdc51 Preserve writable OIDC fields on the loopback callback update. codex 2026-09-15 02:23:22 +02:00
  • 7496d9fab5 Require an absolute owner command after attended OpenBao login. codex 2026-09-15 02:16:42 +02:00
  • bb1aa85aea repo.work.assign_missing_identifiers repo-manager 2026-09-15 02:08:45 +02:00
  • d2dbc19c25 Allocate sitting-requester CCR pair and record operator gates. codex 2026-09-15 02:08:39 +02:00
  • f05ef49c69 Land RPF-WP-0039 third apps-pg consumer source. codex 2026-09-15 01:29:38 +02:00
  • 0178ec3c6d Classify open workplans with flavor (CUST-WP-0072). codex 2026-09-14 15:50:47 +02:00
  • 32095a16fa Refresh WORK-RECORDS.md including RPF-WP-0041. codex 2026-09-14 11:40:31 +02:00
  • ffc7577bed Confirm no platform provisioning from the 105m remainder. codex 2026-09-14 10:34:27 +02:00
  • cb60caf55d Residual from STATE-WP-0091: no platform provisioning from 105m. codex 2026-09-14 10:13:48 +02:00
  • 68b0a37f7d Record attended login recovery and remaining T03 prerequisites codex 2026-09-14 03:55:42 +02:00
  • e0e4d88234 Retain attended preflight failure diagnostics before a safe retry codex 2026-09-14 03:46:29 +02:00
  • 68a059c730 Prepare contained native execution of the three approved T03 actions codex 2026-09-14 03:21:49 +02:00
  • 703d552ee7 Provision scoped T03 requester custody and native requests codex 2026-09-14 02:47:32 +02:00
  • 525664efa3 Verify scoped approval client delivery through attended reader session codex 2026-09-14 01:46:45 +02:00
  • bbff2bfb93 Bind secrets-engine approval reader to confirmed operator group codex 2026-09-14 01:30:23 +02:00
  • 817c122d07 Close factor credential expiry and recovery acceptance for P05 codex 2026-09-13 22:20:14 +02:00
  • a704a72b6e Record completed P04 recovery rollout and acceptance codex 2026-09-13 21:19:13 +02:00
  • 9575b51d6e Implement audited lost-factor recovery and track remaining P04 acceptance codex 2026-09-13 17:28:45 +02:00
  • 0c4db1ef0b repo.work.assign_missing_identifiers repo-manager 2026-09-13 16:26:59 +02:00
  • 2e2c31d237 Establish scoped KeyCape factor custody and verified automatic renewal codex 2026-09-13 16:25:33 +02:00