| .. |
|
openbao_restore_rehearsal.py
|
RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter
|
2026-10-28 00:02:10 +01:00 |
|
probe_bao_cli_synthetic.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
task_execution_source_servers.py
|
feat: journal strict task consumption before native fixture effects
|
2026-10-16 09:20:33 +02:00 |
|
task_execution_trusted_servers.py
|
Prove trusted task chain and prepare bounded signer custody
|
2026-10-16 17:29:12 +02:00 |
|
test_activity_promotion_readiness.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
test_application_archive_retention_plan.py
|
Prepare immutable application archive transfer and retention admission
|
2026-10-07 23:23:33 +02:00 |
|
test_application_backup_credentials.py
|
Accept both backup readers and deliver the email-connect pair.
|
2026-10-09 00:05:35 +02:00 |
|
test_application_backup_pair_custody.py
|
Accept both backup readers and deliver the email-connect pair.
|
2026-10-09 00:05:35 +02:00 |
|
test_application_recovery_access.py
|
Establish Coulomb scoped recovery API custody and native boundaries
|
2026-10-29 22:15:27 +01:00 |
|
test_application_recovery_drill.py
|
Automate timed recovery from the protected provider kit and separate escrow
|
2026-10-29 22:43:05 +01:00 |
|
test_application_recovery_identities.py
|
Prepare scoped recovery resources and bounded construction renewal
|
2026-10-29 21:52:55 +01:00 |
|
test_application_recovery_kit.py
|
Retain verified recovery proof independently and bind the protected point
|
2026-10-29 22:49:33 +01:00 |
|
test_application_recovery_mirror.py
|
Add immutable Coulomb recovery mirroring through scoped APIs
|
2026-10-29 22:25:41 +01:00 |
|
test_application_recovery_resources.py
|
Establish Coulomb scoped recovery API custody and native boundaries
|
2026-10-29 22:15:27 +01:00 |
|
test_approval_client_reader.py
|
Verify scoped approval client delivery through attended reader session
|
2026-09-14 01:46:45 +02:00 |
|
test_apps_pg_capacity.py
|
Land RPF-WP-0039 third apps-pg consumer source.
|
2026-09-15 01:29:38 +02:00 |
|
test_archive_receipt_lifecycle.py
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
test_archive_recovery_evidence.py
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
test_argocd_adoption_proof.py
|
Prove pinned OpenBao ArgoCD adoption with deterministic native checks
|
2026-10-11 21:30:47 +02:00 |
|
test_audit_core_database_lease_recovery.py
|
RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note
|
2026-10-15 00:24:15 +02:00 |
|
test_audit_core_recovery_preflight.py
|
RPF-WP-0015-T03: attended OpenBao reboot snapshot lane with mandatory off-OpenBao escrow
|
2026-10-14 19:49:02 +02:00 |
|
test_audit_core_synthetic_sender_lane.py
|
RPF-WP-0015-T02: contained-login only, single silent attended window
|
2026-10-14 14:23:46 +02:00 |
|
test_audit_core_whitehat_e2_credentials.py
|
Add attended Whitehat E2 credential projection
|
2026-08-22 12:59:38 +02:00 |
|
test_audit_core_whitehat_e2_credentials_02.py
|
Harden remote kubectl argument quoting
|
2026-08-22 21:25:20 +02:00 |
|
test_authelia_smtp_delivery.py
|
Prepare attended scoped platform mailbox admission for Authelia
|
2026-10-06 19:30:59 +02:00 |
|
test_backup_credential_contract_export.py
|
Accept both backup readers and deliver the email-connect pair.
|
2026-10-09 00:05:35 +02:00 |
|
test_backup_credentials.py
|
fix(backup): send required public DAV upload marker
|
2026-10-03 21:20:21 +02:00 |
|
test_backup_retention_plan.py
|
Verify full and essentials recovery and implement bounded retention tooling
|
2026-09-06 11:10:50 +02:00 |
|
test_backup_tiers.py
|
Bind essentials recovery to explicit manifest and verified offsite provenance
|
2026-09-06 09:25:26 +02:00 |
|
test_broker_grant_lane.py
|
RPF-WP-0054-T05: fix issuer binding after the first probe
|
2026-10-10 11:12:19 +02:00 |
|
test_cadence_observer_readback.py
|
Record native receiver custody and prepare actual Approval lifecycle readback
|
2026-10-15 21:40:48 +02:00 |
|
test_cadence_receiver_custody.py
|
Record explicit owner approval for exact Qonto custody packet
|
2026-10-15 21:27:32 +02:00 |
|
test_catalog_lane_scaffold.py
|
Implement offline catalog lane scaffold generation
|
2026-10-04 02:24:40 +02:00 |
|
test_ccr_intake.py
|
RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision
|
2026-10-18 12:53:19 +02:00 |
|
test_consumption_mode.py
|
Finish RAILIANCE-WP-0017 consumption-mode enforcement
|
2026-08-15 14:56:02 +02:00 |
|
test_core_hub_forgejo_source_provision.py
|
CCR-2026-0031: choose the private probe repo with the admin token
|
2026-10-03 10:07:54 +02:00 |
|
test_credential_change.py
|
RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)
|
2026-10-14 23:45:00 +02:00 |
|
test_credential_change_appliers.py
|
Add credential-change delegated applier flow
|
2026-07-01 20:07:26 +02:00 |
|
test_credential_grants.py
|
Bind mint broker validation to exact reviewed sources and track successor obligations
|
2026-10-17 22:55:51 +02:00 |
|
test_credential_helper.py
|
Adopt canonical flex-auth credential checks
|
2026-08-23 14:03:40 +02:00 |
|
test_custodian_agent_rbac.py
|
RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02)
|
2026-10-20 13:38:05 +02:00 |
|
test_custodian_allocation_review.py
|
CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project
|
2026-10-21 08:41:37 +02:00 |
|
test_custody_contract.py
|
Add versioned ephemeral custody lifecycle
|
2026-08-22 21:56:42 +02:00 |
|
test_custody_projection.py
|
Add versioned ephemeral custody lifecycle
|
2026-08-22 21:56:42 +02:00 |
|
test_digest_retention.py
|
Protect digest-pinned packages and refuse partial-inventory pruning
|
2026-09-27 16:00:51 +02:00 |
|
test_eso_adoption_readiness.py
|
Gate ESO adoption on verified predecessors and receive release custody handoff
|
2026-10-11 23:25:20 +02:00 |
|
test_eso_attended_checks.py
|
RPF-WP-0044-T06: founder cluster route and attended ESO adoption script
|
2026-10-21 01:23:16 +02:00 |
|
test_eso_auth_recovery.py
|
Document recovered ESO lanes and recognize explicit invalid-token responses
|
2026-09-05 18:51:40 +02:00 |
|
test_eso_token_renewer.py
|
RPF-WP-0046: periodic ESO database tokens and a daily renewer
|
2026-09-23 19:53:12 +02:00 |
|
test_factory_audit_custody.py
|
Record live receiver gate and isolate readiness from attestation jobs
|
2026-09-11 07:26:16 +02:00 |
|
test_factory_audit_delivery.py
|
feat: deliver approved factory audit sender custody
|
2026-09-11 09:38:27 +02:00 |
|
test_factory_native_acceptance.py
|
Exercise fsGroup startup through the corrected producer helper
|
2026-09-11 12:41:50 +02:00 |
|
test_flex_auth_signer_custody.py
|
Prove trusted task chain and prepare bounded signer custody
|
2026-10-16 17:29:12 +02:00 |
|
test_flex_auth_signer_native.py
|
RPF-WP-0035-T14: flex-auth signer custody founder gate, runbook and review dispositions
|
2026-10-21 01:24:45 +02:00 |
|
test_flex_auth_signer_native_preparation.py
|
Add attended signer adapter with phase-aware read-only recovery
|
2026-10-16 18:44:07 +02:00 |
|
test_fluid_telegram_custody_move.py
|
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers
|
2026-10-09 12:10:21 +02:00 |
|
test_forgejo_archive_integrity.py
|
Reject unfinished or truncated Forgejo backup archives before encryption
|
2026-09-05 22:10:22 +02:00 |
|
test_forgejo_package_prune.py
|
Refuse prune apply when requested image inventories are unavailable
|
2026-09-05 02:00:50 +02:00 |
|
test_inbound_library_imap_entry.py
|
Prepare password-free inbound-library IMAP entry for attended custody
|
2026-10-05 11:14:54 +02:00 |
|
test_informed_decision_requester_metadata.py
|
Record native ESO result and prepare scoped self-token amendment
|
2026-10-04 23:21:55 +02:00 |
|
test_issue_core_credential_executor.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
test_issuer_binding_lane.py
|
RPF-WP-0054-T05: fix issuer binding after the first probe
|
2026-10-10 11:12:19 +02:00 |
|
test_keycape_approval_custody.py
|
feat: verify live KeyCape custody and preserve versions on resume
|
2026-09-09 02:18:12 +02:00 |
|
test_keycape_client_secret_generate.py
|
Bind mint broker validation to exact reviewed sources and track successor obligations
|
2026-10-17 22:55:51 +02:00 |
|
test_keycape_factor_activation.py
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
test_keycape_factor_metadata.py
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
test_keycape_factor_provider.py
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
test_keycape_factor_recovery.py
|
Implement audited lost-factor recovery and track remaining P04 acceptance
|
2026-09-13 17:28:45 +02:00 |
|
test_keycape_factor_renewal.py
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
test_keycape_issuer_eso.py
|
feat: declare proposed fixed KeyCape issuer ESO source contract
|
2026-10-17 20:36:52 +02:00 |
|
test_keycape_secrets_engine_openbao_custody.py
|
Record founder approval 2ab717e1 on CCR-2026-0033/0034 and the ESO admission
|
2026-10-07 00:25:37 +02:00 |
|
test_kube_route.py
|
RPF-WP-0044-T06: founder cluster route and attended ESO adoption script
|
2026-10-21 01:23:16 +02:00 |
|
test_kv_duplicate_retire.py
|
kv_duplicate_retire: block only on data-path grants
|
2026-10-09 12:27:43 +02:00 |
|
test_live_images_inventory.py
|
Add failure-safe cluster image capture hook
|
2026-09-05 10:04:38 +02:00 |
|
test_metered_requester.py
|
Prepare exact metered requester extension with scope refusal tests
|
2026-09-27 20:34:52 +02:00 |
|
test_netkingdom_role_files.py
|
RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)
|
2026-10-24 23:49:27 +02:00 |
|
test_nextcloud_backup_account.py
|
Prepare dedicated Backup account cutover with quota and recovery verification
|
2026-09-05 20:35:13 +02:00 |
|
test_nextcloud_recovery_cleanup.py
|
Bound rejected backup fixture cleanup to successful replacement recovery
|
2026-09-06 01:05:27 +02:00 |
|
test_offsite_restore_boundaries.py
|
Prepare isolated offsite restore and stream large backup transfers
|
2026-09-05 22:18:05 +02:00 |
|
test_openbao_break_glass_drill.py
|
RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter
|
2026-10-28 00:02:10 +01:00 |
|
test_openbao_isolated_restore.py
|
RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter
|
2026-10-28 00:02:10 +01:00 |
|
test_openbao_isolated_restore_native.py
|
RPF-WP-0064-T10: break-glass drill mode for the isolated restore adapter
|
2026-10-28 00:02:10 +01:00 |
|
test_openbao_operator_loopback_callback.py
|
Add sitting-requester create-only token-exchange proof.
|
2026-09-15 20:38:47 +02:00 |
|
test_openbao_platform_admin_aal2.py
|
RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane
|
2026-10-27 22:46:31 +01:00 |
|
test_openbao_platform_admin_callback_prune.py
|
RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)
|
2026-10-24 23:49:27 +02:00 |
|
test_openbao_platform_admin_check.py
|
Declare live platform-admin role and policies; add attended admin check
|
2026-09-23 19:27:25 +02:00 |
|
test_openbao_policy_sync.py
|
CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)
|
2026-09-23 20:00:40 +02:00 |
|
test_openbao_reboot_snapshot.py
|
RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format
|
2026-10-14 20:04:25 +02:00 |
|
test_openbao_revoke_initial_root_token.py
|
NK-WP-0055-T16: guarded revoke of the held initial root token for production entry
|
2026-10-28 00:54:59 +01:00 |
|
test_openbao_ui_role_select.py
|
RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)
|
2026-10-14 23:45:00 +02:00 |
|
test_operator_browser.py
|
Restore contained attended browser launch on WSL without xdg-utils
|
2026-09-06 00:44:08 +02:00 |
|
test_operator_matrix_lane.py
|
RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate
|
2026-10-09 19:08:25 +02:00 |
|
test_operators_entry_retire.py
|
ADHOC-2026-10-10: retire the deprecated operators/nextcloud entry
|
2026-10-10 15:32:02 +02:00 |
|
test_ops_mason_builder_rbac.py
|
Pin the ops-mason-builder Application to its introducing commit
|
2026-10-22 08:48:44 +02:00 |
|
test_playwright_consumer.py
|
Prepare Playwright consumer credentials and identity activation handoff
|
2026-10-13 21:21:58 +02:00 |
|
test_policy_nexus_forgejo_source_provision.py
|
Activate Policy Nexus source credential lane
|
2026-09-01 01:35:48 +02:00 |
|
test_primary_application_archive.py
|
Prepare immutable application archive transfer and retention admission
|
2026-10-07 23:23:33 +02:00 |
|
test_provisioning_window.py
|
Prepare offline attended provisioning checklists and route remaining custody gates
|
2026-10-04 00:27:00 +02:00 |
|
test_public_transport.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
test_railiance_clock_custody.py
|
Implement attended Railiance Clock host key delivery
|
2026-09-15 23:00:20 +02:00 |
|
test_recovery_evidence.py
|
Validate OpenBao snapshot evidence and record assurance closure gates
|
2026-09-06 15:24:58 +02:00 |
|
test_remote_exec.py
|
Add versioned ephemeral custody lifecycle
|
2026-08-22 21:56:42 +02:00 |
|
test_reuse_surface_forgejo_source_provision.py
|
Prepare restricted seven-source reuse reader and bounded recovery
|
2026-10-15 01:25:46 +02:00 |
|
test_reuse_surface_forgejo_source_recovery.py
|
Prepare restricted seven-source reuse reader and bounded recovery
|
2026-10-15 01:25:46 +02:00 |
|
test_reuse_surface_reader_custody_apply.py
|
Prepare reviewed attended reuse-reader custody execution
|
2026-10-15 01:57:25 +02:00 |
|
test_root_custody_finish.py
|
feat(backup): repair reviewed upload share after history recovery proof
|
2026-10-03 21:50:19 +02:00 |
|
test_root_grant_attended.py
|
Implement attended root custody admission and crash-safe publisher
|
2026-10-03 19:44:22 +02:00 |
|
test_root_grant_publish.py
|
Prepare conditional platform-root custody document producer
|
2026-10-03 18:51:26 +02:00 |
|
test_secrets_engine_jwt_contract.py
|
RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao
|
2026-10-09 00:31:47 +02:00 |
|
test_service_assurance.py
|
RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished
|
2026-09-24 00:48:24 +02:00 |
|
test_service_identity_metadata_export.py
|
RPF-WP-0067: owner answers for NK-WP-0040-T02 and value-safe identity metadata exporter for NK-WP-0054-T04
|
2026-10-28 09:52:15 +01:00 |
|
test_service_jwt_lane.py
|
RPF-WP-0035-T02: record founder approval and delegated apply of CCR-2026-0038
|
2026-10-09 11:47:09 +02:00 |
|
test_sitting_requester_provisioning.py
|
Classify sitting-requester exchange failures and retry failed receipts.
|
2026-09-15 20:51:28 +02:00 |
|
test_state_hub_preflight_lane.py
|
Document recovered ESO lanes and recognize explicit invalid-token responses
|
2026-09-05 18:51:40 +02:00 |
|
test_t02_attended_window.py
|
RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane
|
2026-10-14 20:30:11 +02:00 |
|
test_t03_request_time.py
|
Renew T03 requests using Railiance time and bind native execution
|
2026-09-16 01:08:56 +02:00 |
|
test_t03_revocation_probe.py
|
Point the OpenRouter cycle at memo version 3.
|
2026-09-27 15:33:09 +02:00 |
|
test_task_execution_cleanup.py
|
fix(execution): retain scoped cleanup after uncertain outcomes
|
2026-10-16 01:51:53 +02:00 |
|
test_task_execution_cleanup_calls.py
|
feat(execution): prove fixed grant and cleanup against disposable OpenBao
|
2026-10-16 07:43:52 +02:00 |
|
test_task_execution_grant.py
|
feat(execution): bind immutable task grants before native effects
|
2026-10-16 07:51:42 +02:00 |
|
test_task_execution_journal.py
|
feat(execution): prove fixed grant and cleanup against disposable OpenBao
|
2026-10-16 07:43:52 +02:00 |
|
test_task_execution_mediation_journal.py
|
feat: journal strict task consumption before native fixture effects
|
2026-10-16 09:20:33 +02:00 |
|
test_task_execution_mediator.py
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
test_task_execution_native_budget.py
|
Bound task execution by absolute call and credential deadlines
|
2026-10-16 17:15:00 +02:00 |
|
test_task_execution_native_fixture.py
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
test_task_execution_plan.py
|
feat(execution): prove fixed grant and cleanup against disposable OpenBao
|
2026-10-16 07:43:52 +02:00 |
|
test_task_execution_readback.py
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
test_task_execution_recovery.py
|
Recover exact task cleanup after executor process loss
|
2026-10-16 16:43:20 +02:00 |
|
test_task_execution_trusted_whole.py
|
Prove trusted task chain and prepare bounded signer custody
|
2026-10-16 17:29:12 +02:00 |
|
test_telemetry_primary_archive.py
|
Verify telemetry essentials recovery from versioned Scaleway archive
|
2026-09-06 23:46:20 +02:00 |
|
test_telemetry_smtp_delivery.py
|
Add attended SMTP verification and exact reader admission
|
2026-09-28 11:21:57 +02:00 |
|
test_telemetry_smtp_entry.py
|
Prepare password-free telemetry SMTP entry for attended custody
|
2026-09-28 11:11:34 +02:00 |
|
test_tenant_engine_audit_core_sender_eso.py
|
RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test
|
2026-10-03 00:16:49 +02:00 |
|
test_tenant_engine_audit_core_sender_seed.py
|
CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08
|
2026-10-03 08:28:32 +02:00 |
|
test_vergabe_demo_provisioning.py
|
Land RPF-WP-0039 third apps-pg consumer source.
|
2026-09-15 01:29:38 +02:00 |
|
test_verify_informed_decision_requester.py
|
Prepare bounded native requester and wrong-identity proofs
|
2026-10-04 23:32:00 +02:00 |
|
test_workload_adoption_proof.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
test_wp0024_owner_review.py
|
Include platform owner in WP-0024 receipts
|
2026-08-22 14:59:59 +02:00 |
|
test_wp0024_t02_driver_candidate.py
|
Add direct WP-0024 load driver handoff
|
2026-08-22 16:17:03 +02:00 |
|
test_wp0025_broker_readiness.py
|
Adopt canonical flex-auth credential checks
|
2026-08-23 14:03:40 +02:00 |
