..
adr
Activate Playwright pilot with scoped consumer group and native evidence
2026-10-13 20:55:31 +02:00
contracts
RPF-WP-0054-T05 probe passed; publish secrets-engine JWT login contract
2026-10-10 11:18:38 +02:00
credential-lane-designs
CCR-2026-0058: drop required_parameters from the write policy; back to proposed for re-approval
2026-10-31 16:24:47 +01:00
drafts
Accept the policy-nexus multi-source shape and draft the Application.
2026-10-05 01:37:43 +02:00
evidence
Prepare supervised email-connect SMTP foundation and projection
2026-10-31 12:00:57 +01:00
object-storage
Add the two publisher prefixes to the backup bucket policy.
2026-10-08 23:42:25 +02:00
proposals
Prepare source-only KEY-WP-0039-T02 owner returns
2026-10-17 04:31:07 +02:00
provisioning-windows /2026-10-04-1000
Silence applier-apply under --quiet and drop the retired bao callback default
2026-10-07 09:16:58 +02:00
reviews
Retain qualified coding custody source assessment and plan index
2026-10-11 19:47:45 +02:00
runbooks
CCR-2026-0050: record access-engine-owner approval; runbook uses Access public-receipt tool and pin
2026-10-21 01:35:14 +02:00
activity-core-release-admission.md
Prove Target Revenue adoption and prepare bounded issue-core delivery
2026-10-11 22:53:54 +02:00
apps-pg.md
Land RPF-WP-0039 third apps-pg consumer source.
2026-09-15 01:29:38 +02:00
argocd-coulombcore-retirement.md
Close verified incident task and finish local workplan loose ends
2026-09-27 19:04:54 +02:00
argocd-gitops.md
RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d.
2026-09-21 19:05:56 +02:00
attended-provisioning-window.md
Record founder batched attended custody choice
2026-10-04 03:00:33 +02:00
audit-core-database-lease-approval.example.json
RPF-WP-0015: T02 synthetic sender lane, T03 checklist revision, ops-warden re-acceptance
2026-10-14 12:49:40 +02:00
audit-core-database-lease-recovery.md
RPF-WP-0015-T02: select the lease issued for the mounted refresh; leave predecessors
2026-10-14 18:19:38 +02:00
audit-core-whitehat-e2-credential-projection.md
Add attended Whitehat E2 credential projection
2026-08-22 12:59:38 +02:00
backup-credential-recovery.md
Record verified Forgejo Scaleway backup and recovery
2026-09-06 01:03:02 +02:00
backup-provider-coverage.md
Verify full and essentials recovery and implement bounded retention tooling
2026-09-06 11:10:50 +02:00
backup-storage-tiers.md
Verify full and essentials recovery and implement bounded retention tooling
2026-09-06 11:10:50 +02:00
cadence-receiver-custody.md
Record native receiver custody and prepare actual Approval lifecycle readback
2026-10-15 21:40:48 +02:00
catalog-lane-scaffold.md
Implement offline catalog lane scaffold generation
2026-10-04 02:24:40 +02:00
cnpg-option-a-backup.md
Include user-engine in offsite CNPG backups
2026-07-30 00:05:58 +02:00
coding-agent-openbao-identity.md
RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)
2026-10-24 23:49:27 +02:00
consumption-mode-enforcement.md
Finish RAILIANCE-WP-0017 consumption-mode enforcement
2026-08-15 14:56:02 +02:00
credential-broker.md
Adopt canonical flex-auth credential checks
2026-08-23 14:03:40 +02:00
credential-change-approval.md
RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision
2026-10-18 12:53:19 +02:00
credential-lane-lifecycle-runbook.md
Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision
2026-08-11 22:41:30 +02:00
custody-projection-contract.example.json
Add versioned ephemeral custody lifecycle
2026-08-22 21:56:42 +02:00
direct-apply-gap-inventory.md
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
2026-09-22 22:47:42 +02:00
email-connect-smtp-admission-2026-10-31.md
Prepare supervised email-connect SMTP foundation and projection
2026-10-31 12:00:57 +01:00
email-connect-smtp-foundation-review-2026-10-31.md
Prepare supervised email-connect SMTP foundation and projection
2026-10-31 12:00:57 +01:00
ephemeral-custody-lifecycle.md
Add versioned ephemeral custody lifecycle
2026-08-22 21:56:42 +02:00
eso-auth-recovery.md
Document recovered ESO lanes and recognize explicit invalid-token responses
2026-09-05 18:51:40 +02:00
forgejo-backup.md
Verify Scaleway primary recovery and distinguish secondary backup coverage
2026-09-06 00:34:43 +02:00
forgejo-package-prune.md
Protect digest-pinned packages and refuse partial-inventory pruning
2026-09-27 16:00:51 +02:00
inbound-library-imap-custody.md
Prepare password-free inbound-library IMAP entry for attended custody
2026-10-05 11:14:54 +02:00
keycape-client-secret-generate-type-pin-review.md
correct exact source case-type pin
2026-10-11 18:46:21 +02:00
keycape-exposure-rotation-approval.example.json
Record final KeyCape recovery receipt
2026-08-23 14:51:50 +02:00
keycape-factor-recovery.md
Record completed P04 recovery rollout and acceptance
2026-09-13 21:19:13 +02:00
keycape-issuer-eso-contract.md
feat: declare proposed fixed KeyCape issuer ESO source contract
2026-10-17 20:36:52 +02:00
keycape-live-secret-exposure-recovery.md
Record final KeyCape recovery receipt
2026-08-23 14:51:50 +02:00
metered-requester-extension.md
Record approved metered requester extension and six native creates
2026-09-27 21:08:43 +02:00
net-kingdom-credential-custody-contract.md
Close verified incident task and finish local workplan loose ends
2026-09-27 19:04:54 +02:00
openbao-approved-automation-delegation.md
openbao-emergency-drill-evidence.example.json
openbao-isolated-restore.md
RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A)
2026-10-23 20:49:24 +02:00
openbao-open-questions-session.md
Run the custody session through a Make target, and give the runner a shebang
2026-09-10 08:15:41 +02:00
openbao-public-listener-transition.md
Pin attended OpenBao login to the operator tunnel.
2026-09-15 20:27:35 +02:00
openbao-reboot-snapshot-receipt.example.json
Harden WP-0024 recovery execution gates
2026-08-22 14:00:18 +02:00
openbao-restore-admission.example.json
RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A)
2026-10-23 20:49:24 +02:00
openbao-restore-drill-evidence.example.json
openbao-restore-receipt-v2.example.json
RPF-WP-0064-T07: record attempt -01 (unsealed, no leader in 60 s); leader wait 180 s with bounded diagnostics
2026-10-24 10:54:02 +02:00
openbao.md
NK-WP-0055-T16: guarded revoke of the held initial root token for production entry
2026-10-28 00:54:59 +01:00
placement-policy.md
Land RPF-WP-0039 third apps-pg consumer source.
2026-09-15 01:29:38 +02:00
platform-ownership-handoffs.md
Review blocked platform obligations and archive completed ESO recovery
2026-09-05 21:16:53 +02:00
platform-tenant-essentials-review.md
Prepare tenant-zero OpenBao roles and review platform essentials
2026-09-27 16:43:32 +02:00
playwright-consumer-access.md
Prepare Playwright consumer credentials and identity activation handoff
2026-10-13 21:21:58 +02:00
playwright-identity-handoff.md
RPF-WP-0056: record KeyCape source acceptance of the public client
2026-10-14 18:35:34 +02:00
postgresql-ha.md
Finish architecture-cleanup RAILIANCE-WP-0016 T05
2026-08-15 14:43:44 +02:00
put-backup-object-storage.md
docs: how to add APPLICATION_ID for the backup bucket policy
2026-08-14 19:52:08 +02:00
railiance01-coordinated-reboot.md
RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note
2026-10-15 00:24:15 +02:00
rapp-credential-lane-binding.md
retarget: CCR-2026-0012 is the general backup object-store lane
2026-08-14 19:19:56 +02:00
rapp-openbao-boundary.md
Document rapp-openbao compatibility handoff
2026-07-26 10:39:40 +02:00
rapp-openbao-compatibility-handoff.md
Document rapp-openbao compatibility handoff
2026-07-26 10:39:40 +02:00
rapp-platform-service-pattern.md
Close RAILIANCE-WP-0015-T06 rapp credential-lane binding
2026-08-14 00:47:28 +02:00
rapp-postgres-boundary.md
Broker audit-core dynamic database credentials
2026-08-10 19:36:30 +02:00
reuse-surface-runtime-secrets-rotation-runbook.md
rpf-wp-0015-attended-windows.md
RPF-WP-0015-T02: contained-login only, single silent attended window
2026-10-14 14:23:46 +02:00
s3-consumer-interfaces.md
Land RPF-WP-0039 third apps-pg consumer source.
2026-09-15 01:29:38 +02:00
service-assurance.md
Close verified incident task and finish local workplan loose ends
2026-09-27 19:04:54 +02:00
task-execution-cleanup.md
fix(execution): retain scoped cleanup after uncertain outcomes
2026-10-16 01:51:53 +02:00
task-execution-grant-projection.md
feat(execution): bind immutable task grants before native effects
2026-10-16 07:51:42 +02:00
task-execution-mediator-seam.md
Verify exact task metadata baseline and readback
2026-10-16 10:48:21 +02:00
task-execution-native-fixture.md
Prove trusted task chain and prepare bounded signer custody
2026-10-16 17:29:12 +02:00
task-execution-plan-compiler.md
fix(execution): retain scoped cleanup after uncertain outcomes
2026-10-16 01:51:53 +02:00
telemetry-smtp-custody.md
Complete scoped Authelia SMTP admission and record rotation consumers
2026-10-06 20:38:28 +02:00
tenancy-posture.md
Prepare tenant-zero OpenBao roles and review platform essentials
2026-09-27 16:43:32 +02:00
WH-ENG-20260822-AUDIT-E2-03-custody-contract.json
Approve audit E2 third custody contract
2026-08-22 23:30:07 +02:00
whynot-design-npm-publish-handoff.md
Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision
2026-08-11 22:41:30 +02:00
workload-kv-access-lanes.md
Settle the npm lane field, and record an ungoverned duplicate
2026-09-10 09:03:22 +02:00
wp0024-owner-review-interface.md
Add direct WP-0024 load driver handoff
2026-08-22 16:17:03 +02:00