railiance-platform/docs
codex 8cab281ffc
All checks were successful
CCR intake gate / gate (push) Successful in 9s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
CCR-2026-0055: state the gate precisely (attended pi-admin, MFA login proves the write)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 896183@bnt-lap001
Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2
2026-10-31 11:07:05 +01:00
..
adr Activate Playwright pilot with scoped consumer group and native evidence 2026-10-13 20:55:31 +02:00
contracts RPF-WP-0054-T05 probe passed; publish secrets-engine JWT login contract 2026-10-10 11:18:38 +02:00
credential-lane-designs CCR-2026-0055: state the gate precisely (attended pi-admin, MFA login proves the write) 2026-10-31 11:07:05 +01:00
drafts Accept the policy-nexus multi-source shape and draft the Application. 2026-10-05 01:37:43 +02:00
evidence Refresh Coulomb protected recovery point after date correction 2026-10-31 08:43:05 +01:00
object-storage Add the two publisher prefixes to the backup bucket policy. 2026-10-08 23:42:25 +02:00
proposals Prepare source-only KEY-WP-0039-T02 owner returns 2026-10-17 04:31:07 +02:00
provisioning-windows/2026-10-04-1000 Silence applier-apply under --quiet and drop the retired bao callback default 2026-10-07 09:16:58 +02:00
reviews Retain qualified coding custody source assessment and plan index 2026-10-11 19:47:45 +02:00
runbooks CCR-2026-0050: record access-engine-owner approval; runbook uses Access public-receipt tool and pin 2026-10-21 01:35:14 +02:00
activity-core-release-admission.md Prove Target Revenue adoption and prepare bounded issue-core delivery 2026-10-11 22:53:54 +02:00
apps-pg.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
argocd-coulombcore-retirement.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
argocd-gitops.md RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d. 2026-09-21 19:05:56 +02:00
attended-provisioning-window.md Record founder batched attended custody choice 2026-10-04 03:00:33 +02:00
audit-core-database-lease-approval.example.json RPF-WP-0015: T02 synthetic sender lane, T03 checklist revision, ops-warden re-acceptance 2026-10-14 12:49:40 +02:00
audit-core-database-lease-recovery.md RPF-WP-0015-T02: select the lease issued for the mounted refresh; leave predecessors 2026-10-14 18:19:38 +02:00
audit-core-whitehat-e2-credential-projection.md Add attended Whitehat E2 credential projection 2026-08-22 12:59:38 +02:00
backup-credential-recovery.md Record verified Forgejo Scaleway backup and recovery 2026-09-06 01:03:02 +02:00
backup-provider-coverage.md Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
backup-storage-tiers.md Verify full and essentials recovery and implement bounded retention tooling 2026-09-06 11:10:50 +02:00
cadence-receiver-custody.md Record native receiver custody and prepare actual Approval lifecycle readback 2026-10-15 21:40:48 +02:00
catalog-lane-scaffold.md Implement offline catalog lane scaffold generation 2026-10-04 02:24:40 +02:00
cnpg-option-a-backup.md Include user-engine in offsite CNPG backups 2026-07-30 00:05:58 +02:00
coding-agent-openbao-identity.md RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054) 2026-10-24 23:49:27 +02:00
consumption-mode-enforcement.md Finish RAILIANCE-WP-0017 consumption-mode enforcement 2026-08-15 14:56:02 +02:00
credential-broker.md Adopt canonical flex-auth credential checks 2026-08-23 14:03:40 +02:00
credential-change-approval.md RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision 2026-10-18 12:53:19 +02:00
credential-lane-lifecycle-runbook.md Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision 2026-08-11 22:41:30 +02:00
custody-projection-contract.example.json Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
direct-apply-gap-inventory.md Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults 2026-09-22 22:47:42 +02:00
ephemeral-custody-lifecycle.md Add versioned ephemeral custody lifecycle 2026-08-22 21:56:42 +02:00
eso-auth-recovery.md Document recovered ESO lanes and recognize explicit invalid-token responses 2026-09-05 18:51:40 +02:00
forgejo-backup.md Verify Scaleway primary recovery and distinguish secondary backup coverage 2026-09-06 00:34:43 +02:00
forgejo-package-prune.md Protect digest-pinned packages and refuse partial-inventory pruning 2026-09-27 16:00:51 +02:00
inbound-library-imap-custody.md Prepare password-free inbound-library IMAP entry for attended custody 2026-10-05 11:14:54 +02:00
keycape-client-secret-generate-type-pin-review.md correct exact source case-type pin 2026-10-11 18:46:21 +02:00
keycape-exposure-rotation-approval.example.json Record final KeyCape recovery receipt 2026-08-23 14:51:50 +02:00
keycape-factor-recovery.md Record completed P04 recovery rollout and acceptance 2026-09-13 21:19:13 +02:00
keycape-issuer-eso-contract.md feat: declare proposed fixed KeyCape issuer ESO source contract 2026-10-17 20:36:52 +02:00
keycape-live-secret-exposure-recovery.md Record final KeyCape recovery receipt 2026-08-23 14:51:50 +02:00
metered-requester-extension.md Record approved metered requester extension and six native creates 2026-09-27 21:08:43 +02:00
net-kingdom-credential-custody-contract.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
openbao-approved-automation-delegation.md Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
openbao-emergency-drill-evidence.example.json Add OpenBao emergency drill evidence validator 2026-06-02 00:08:17 +02:00
openbao-isolated-restore.md RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A) 2026-10-23 20:49:24 +02:00
openbao-open-questions-session.md Run the custody session through a Make target, and give the runner a shebang 2026-09-10 08:15:41 +02:00
openbao-public-listener-transition.md Pin attended OpenBao login to the operator tunnel. 2026-09-15 20:27:35 +02:00
openbao-reboot-snapshot-receipt.example.json Harden WP-0024 recovery execution gates 2026-08-22 14:00:18 +02:00
openbao-restore-admission.example.json RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A) 2026-10-23 20:49:24 +02:00
openbao-restore-drill-evidence.example.json Add OpenBao restore evidence validator 2026-06-01 23:57:00 +02:00
openbao-restore-receipt-v2.example.json RPF-WP-0064-T07: record attempt -01 (unsealed, no leader in 60 s); leader wait 180 s with bounded diagnostics 2026-10-24 10:54:02 +02:00
openbao.md NK-WP-0055-T16: guarded revoke of the held initial root token for production entry 2026-10-28 00:54:59 +01:00
placement-policy.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
platform-ownership-handoffs.md Review blocked platform obligations and archive completed ESO recovery 2026-09-05 21:16:53 +02:00
platform-tenant-essentials-review.md Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
playwright-consumer-access.md Prepare Playwright consumer credentials and identity activation handoff 2026-10-13 21:21:58 +02:00
playwright-identity-handoff.md RPF-WP-0056: record KeyCape source acceptance of the public client 2026-10-14 18:35:34 +02:00
postgresql-ha.md Finish architecture-cleanup RAILIANCE-WP-0016 T05 2026-08-15 14:43:44 +02:00
put-backup-object-storage.md docs: how to add APPLICATION_ID for the backup bucket policy 2026-08-14 19:52:08 +02:00
railiance01-coordinated-reboot.md RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note 2026-10-15 00:24:15 +02:00
rapp-credential-lane-binding.md retarget: CCR-2026-0012 is the general backup object-store lane 2026-08-14 19:19:56 +02:00
rapp-openbao-boundary.md Document rapp-openbao compatibility handoff 2026-07-26 10:39:40 +02:00
rapp-openbao-compatibility-handoff.md Document rapp-openbao compatibility handoff 2026-07-26 10:39:40 +02:00
rapp-platform-service-pattern.md Close RAILIANCE-WP-0015-T06 rapp credential-lane binding 2026-08-14 00:47:28 +02:00
rapp-postgres-boundary.md Broker audit-core dynamic database credentials 2026-08-10 19:36:30 +02:00
reuse-surface-runtime-secrets-rotation-runbook.md Add reuse-surface secrets rotation runbook (RAILIANCE-WP-0011-T04) 2026-07-08 00:01:21 +02:00
rpf-wp-0015-attended-windows.md RPF-WP-0015-T02: contained-login only, single silent attended window 2026-10-14 14:23:46 +02:00
s3-consumer-interfaces.md Land RPF-WP-0039 third apps-pg consumer source. 2026-09-15 01:29:38 +02:00
service-assurance.md Close verified incident task and finish local workplan loose ends 2026-09-27 19:04:54 +02:00
task-execution-cleanup.md fix(execution): retain scoped cleanup after uncertain outcomes 2026-10-16 01:51:53 +02:00
task-execution-grant-projection.md feat(execution): bind immutable task grants before native effects 2026-10-16 07:51:42 +02:00
task-execution-mediator-seam.md Verify exact task metadata baseline and readback 2026-10-16 10:48:21 +02:00
task-execution-native-fixture.md Prove trusted task chain and prepare bounded signer custody 2026-10-16 17:29:12 +02:00
task-execution-plan-compiler.md fix(execution): retain scoped cleanup after uncertain outcomes 2026-10-16 01:51:53 +02:00
telemetry-smtp-custody.md Complete scoped Authelia SMTP admission and record rotation consumers 2026-10-06 20:38:28 +02:00
tenancy-posture.md Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
WH-ENG-20260822-AUDIT-E2-03-custody-contract.json Approve audit E2 third custody contract 2026-08-22 23:30:07 +02:00
whynot-design-npm-publish-handoff.md Update Gitea prose to Forgejo; place forge; record ArgoCD as an open decision 2026-08-11 22:41:30 +02:00
workload-kv-access-lanes.md Settle the npm lane field, and record an ungoverned duplicate 2026-09-10 09:03:22 +02:00
wp0024-owner-review-interface.md Add direct WP-0024 load driver handoff 2026-08-22 16:17:03 +02:00