| .. |
|
adr
|
Activate Playwright pilot with scoped consumer group and native evidence
|
2026-10-13 20:55:31 +02:00 |
|
contracts
|
RPF-WP-0054-T05 probe passed; publish secrets-engine JWT login contract
|
2026-10-10 11:18:38 +02:00 |
|
credential-lane-designs
|
CCR-2026-0055: state the gate precisely (attended pi-admin, MFA login proves the write)
|
2026-10-31 11:07:05 +01:00 |
|
drafts
|
Accept the policy-nexus multi-source shape and draft the Application.
|
2026-10-05 01:37:43 +02:00 |
|
evidence
|
Prepare guarded email-connect platform SMTP reader admission
|
2026-10-31 11:54:53 +01:00 |
|
object-storage
|
Add the two publisher prefixes to the backup bucket policy.
|
2026-10-08 23:42:25 +02:00 |
|
proposals
|
Prepare source-only KEY-WP-0039-T02 owner returns
|
2026-10-17 04:31:07 +02:00 |
|
provisioning-windows/2026-10-04-1000
|
Silence applier-apply under --quiet and drop the retired bao callback default
|
2026-10-07 09:16:58 +02:00 |
|
reviews
|
Retain qualified coding custody source assessment and plan index
|
2026-10-11 19:47:45 +02:00 |
|
runbooks
|
CCR-2026-0050: record access-engine-owner approval; runbook uses Access public-receipt tool and pin
|
2026-10-21 01:35:14 +02:00 |
|
activity-core-release-admission.md
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
apps-pg.md
|
|
|
|
argocd-coulombcore-retirement.md
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
argocd-gitops.md
|
RPF-WP-0044: T01 done; exact T02/T03 commands pinned to c3ebd6d.
|
2026-09-21 19:05:56 +02:00 |
|
attended-provisioning-window.md
|
Record founder batched attended custody choice
|
2026-10-04 03:00:33 +02:00 |
|
audit-core-database-lease-approval.example.json
|
RPF-WP-0015: T02 synthetic sender lane, T03 checklist revision, ops-warden re-acceptance
|
2026-10-14 12:49:40 +02:00 |
|
audit-core-database-lease-recovery.md
|
RPF-WP-0015-T02: select the lease issued for the mounted refresh; leave predecessors
|
2026-10-14 18:19:38 +02:00 |
|
audit-core-whitehat-e2-credential-projection.md
|
|
|
|
backup-credential-recovery.md
|
|
|
|
backup-provider-coverage.md
|
|
|
|
backup-storage-tiers.md
|
|
|
|
cadence-receiver-custody.md
|
Record native receiver custody and prepare actual Approval lifecycle readback
|
2026-10-15 21:40:48 +02:00 |
|
catalog-lane-scaffold.md
|
Implement offline catalog lane scaffold generation
|
2026-10-04 02:24:40 +02:00 |
|
cnpg-option-a-backup.md
|
|
|
|
coding-agent-openbao-identity.md
|
RPF-WP-0065: coding-agent accepts service+agent transitionally; platform-admin binds aal2 (source only, NK-WP-0054)
|
2026-10-24 23:49:27 +02:00 |
|
consumption-mode-enforcement.md
|
|
|
|
credential-broker.md
|
|
|
|
credential-change-approval.md
|
RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision
|
2026-10-18 12:53:19 +02:00 |
|
credential-lane-lifecycle-runbook.md
|
|
|
|
custody-projection-contract.example.json
|
|
|
|
direct-apply-gap-inventory.md
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
email-connect-smtp-admission-2026-10-31.md
|
Prepare guarded email-connect platform SMTP reader admission
|
2026-10-31 11:54:53 +01:00 |
|
ephemeral-custody-lifecycle.md
|
|
|
|
eso-auth-recovery.md
|
|
|
|
forgejo-backup.md
|
|
|
|
forgejo-package-prune.md
|
Protect digest-pinned packages and refuse partial-inventory pruning
|
2026-09-27 16:00:51 +02:00 |
|
inbound-library-imap-custody.md
|
Prepare password-free inbound-library IMAP entry for attended custody
|
2026-10-05 11:14:54 +02:00 |
|
keycape-client-secret-generate-type-pin-review.md
|
correct exact source case-type pin
|
2026-10-11 18:46:21 +02:00 |
|
keycape-exposure-rotation-approval.example.json
|
|
|
|
keycape-factor-recovery.md
|
|
|
|
keycape-issuer-eso-contract.md
|
feat: declare proposed fixed KeyCape issuer ESO source contract
|
2026-10-17 20:36:52 +02:00 |
|
keycape-live-secret-exposure-recovery.md
|
|
|
|
metered-requester-extension.md
|
Record approved metered requester extension and six native creates
|
2026-09-27 21:08:43 +02:00 |
|
net-kingdom-credential-custody-contract.md
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
openbao-approved-automation-delegation.md
|
|
|
|
openbao-emergency-drill-evidence.example.json
|
|
|
|
openbao-isolated-restore.md
|
RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A)
|
2026-10-23 20:49:24 +02:00 |
|
openbao-open-questions-session.md
|
|
|
|
openbao-public-listener-transition.md
|
|
|
|
openbao-reboot-snapshot-receipt.example.json
|
|
|
|
openbao-restore-admission.example.json
|
RPF-WP-0064-T02: isolated original-OpenBao restore adapter (phase A)
|
2026-10-23 20:49:24 +02:00 |
|
openbao-restore-drill-evidence.example.json
|
|
|
|
openbao-restore-receipt-v2.example.json
|
RPF-WP-0064-T07: record attempt -01 (unsealed, no leader in 60 s); leader wait 180 s with bounded diagnostics
|
2026-10-24 10:54:02 +02:00 |
|
openbao.md
|
NK-WP-0055-T16: guarded revoke of the held initial root token for production entry
|
2026-10-28 00:54:59 +01:00 |
|
placement-policy.md
|
|
|
|
platform-ownership-handoffs.md
|
|
|
|
platform-tenant-essentials-review.md
|
Prepare tenant-zero OpenBao roles and review platform essentials
|
2026-09-27 16:43:32 +02:00 |
|
playwright-consumer-access.md
|
Prepare Playwright consumer credentials and identity activation handoff
|
2026-10-13 21:21:58 +02:00 |
|
playwright-identity-handoff.md
|
RPF-WP-0056: record KeyCape source acceptance of the public client
|
2026-10-14 18:35:34 +02:00 |
|
postgresql-ha.md
|
|
|
|
put-backup-object-storage.md
|
|
|
|
railiance01-coordinated-reboot.md
|
RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note
|
2026-10-15 00:24:15 +02:00 |
|
rapp-credential-lane-binding.md
|
|
|
|
rapp-openbao-boundary.md
|
|
|
|
rapp-openbao-compatibility-handoff.md
|
|
|
|
rapp-platform-service-pattern.md
|
|
|
|
rapp-postgres-boundary.md
|
|
|
|
reuse-surface-runtime-secrets-rotation-runbook.md
|
|
|
|
rpf-wp-0015-attended-windows.md
|
RPF-WP-0015-T02: contained-login only, single silent attended window
|
2026-10-14 14:23:46 +02:00 |
|
s3-consumer-interfaces.md
|
|
|
|
service-assurance.md
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
task-execution-cleanup.md
|
fix(execution): retain scoped cleanup after uncertain outcomes
|
2026-10-16 01:51:53 +02:00 |
|
task-execution-grant-projection.md
|
feat(execution): bind immutable task grants before native effects
|
2026-10-16 07:51:42 +02:00 |
|
task-execution-mediator-seam.md
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
task-execution-native-fixture.md
|
Prove trusted task chain and prepare bounded signer custody
|
2026-10-16 17:29:12 +02:00 |
|
task-execution-plan-compiler.md
|
fix(execution): retain scoped cleanup after uncertain outcomes
|
2026-10-16 01:51:53 +02:00 |
|
telemetry-smtp-custody.md
|
Complete scoped Authelia SMTP admission and record rotation consumers
|
2026-10-06 20:38:28 +02:00 |
|
tenancy-posture.md
|
Prepare tenant-zero OpenBao roles and review platform essentials
|
2026-09-27 16:43:32 +02:00 |
|
WH-ENG-20260822-AUDIT-E2-03-custody-contract.json
|
|
|
|
whynot-design-npm-publish-handoff.md
|
|
|
|
workload-kv-access-lanes.md
|
|
|
|
wp0024-owner-review-interface.md
|
|
|
