..
archived
Review blocked platform obligations and archive completed ESO recovery
2026-09-05 21:16:53 +02:00
.gitkeep
chore(init): scaffold railiance-platform (S3 Platform Services)
2026-03-10 00:36:06 +01:00
ADHOC-2026-10-10.md
ADHOC-2026-10-10: operators/nextcloud retired
2026-10-10 15:37:52 +02:00
ADHOC-2026-10-11.md
repo.work.assign_missing_identifiers
2026-10-11 21:30:57 +02:00
ADHOC-2026-10-19.md
repo.work.assign_missing_identifiers
2026-10-27 22:22:58 +01:00
README.md
Request Custodian coordination of self-service Playwright access
2026-10-13 21:31:32 +02:00
RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
RPF-WP-0015-T03: record E2 attempts blocked by aal1 login (no run, nothing changed)
2026-10-15 04:22:19 +02:00
RPF-WP-0025-openbao-operator-only-access.md
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
2026-09-22 22:47:42 +02:00
RPF-WP-0027-keycape-live-secret-exposure-recovery.md
Return not-yet-ready attended items to owners (2026-10-11)
2026-10-11 21:08:43 +02:00
RPF-WP-0029-backup-credential-default-removal.md
Close RPF-WP-0029-T02 on operator-attested predecessor unshare.
2026-09-15 02:48:15 +02:00
RPF-WP-0035-credential-lane-implementation.md
CCR-2026-0050: record access-engine-owner approval; runbook uses Access public-receipt tool and pin
2026-10-21 01:35:14 +02:00
RPF-WP-0036-platform-service-assurance.md
RPF-WP-0066: OpenBao durable audit shipping, scheduled snapshots, live conformance (NK-WP-0055-T11/T12)
2026-10-27 22:31:57 +01:00
RPF-WP-0038-forgejo-scaleway-primary-coverage.md
Activate Playwright pilot with scoped consumer group and native evidence
2026-10-13 20:55:31 +02:00
RPF-WP-0039-vergabe-demo-company-database.md
Land RPF-WP-0039 third apps-pg consumer source.
2026-09-15 01:29:38 +02:00
RPF-WP-0040-keycape-factor-credential-custody.md
Close factor credential expiry and recovery acceptance for P05
2026-09-13 22:20:14 +02:00
RPF-WP-0041-state-hub-105m-not-provisioning.md
Confirm no platform provisioning from the 105m remainder.
2026-09-14 10:34:27 +02:00
RPF-WP-0042-informed-decision-sitting-requester.md
Close RPF-WP-0042 after sitting-requester exchange proof.
2026-09-15 20:57:50 +02:00
RPF-WP-0043-policy-nexus-argocd-onboarding.md
RPF-WP-0043-T03: record read-only policy-nexus adoption precheck (steps 1 and 3)
2026-10-11 21:08:20 +02:00
RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md
RPF-WP-0044-T06: founder cluster route and attended ESO adoption script
2026-10-21 01:23:16 +02:00
RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md
RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045
2026-09-23 20:17:42 +02:00
RPF-WP-0046-eso-database-token-renewal.md
RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished
2026-09-24 00:48:24 +02:00
RPF-WP-0047-bao-coulomb-social-notice-page.md
Point bao-notice at the rapp-openbao copy of the page.
2026-10-23 17:42:39 +02:00
RPF-WP-0048-activity-core-gitops-adoption.md
Prove Target Revenue adoption and prepare bounded issue-core delivery
2026-10-11 22:53:54 +02:00
RPF-WP-0049-platform-root-custody-record-delivery.md
docs(custody): reference owned backup runtime refresh task
2026-10-03 22:00:53 +02:00
RPF-WP-0050-attended-provisioning-preparation.md
retire historical preparation window
2026-10-11 18:46:20 +02:00
RPF-WP-0051-informed-decision-requester-workload-delivery.md
Accept requester workload delivery and retain separate rotation residual
2026-10-05 00:13:30 +02:00
RPF-WP-0052-authelia-platform-smtp-admission.md
Complete scoped Authelia SMTP admission and record rotation consumers
2026-10-06 20:38:28 +02:00
RPF-WP-0053-coulomb-paired-backup-admission.md
Record admitted Coulomb independent recovery custody and execution preflight
2026-10-28 00:59:05 +01:00
RPF-WP-0054-keycape-client-secret-generate-lane.md
close first-generation lane and retain rotation residual atomically
2026-10-11 18:46:21 +02:00
RPF-WP-0055-keycape-client-secret-rotation-residual.md
close first-generation lane and retain rotation residual atomically
2026-10-11 18:46:21 +02:00
RPF-WP-0056-playwright-consumer-admission.md
RPF-WP-0056: record KeyCape source acceptance of the public client
2026-10-14 18:35:34 +02:00
RPF-WP-0057-sign-in-diagnosis-caller-proof.md
Record approved capabilities-self apply and attended caller proofs
2026-10-15 19:23:28 +02:00
RPF-WP-0058-reuse-private-source-reader.md
Close hosted seven-source reader establishment
2026-10-15 05:42:23 +02:00
RPF-WP-0059-hourly-cadence-receiver-custody.md
Record native receiver custody and prepare actual Approval lifecycle readback
2026-10-15 21:40:48 +02:00
RPF-WP-0060-browser-case-platform-bindings.md
Bind mint broker validation to exact reviewed sources and track successor obligations
2026-10-17 22:55:51 +02:00
RPF-WP-0061-self-service-ccr-intake.md
CCR-2026-0051: binding confirmed on native evidence, status applied; RPF-WP-0061 follow-up D
2026-10-18 12:58:39 +02:00
RPF-WP-0062-custodian-agent-observer-identity.md
Workplan finished: all tasks done after the attended cutover
2026-10-21 00:02:31 +02:00
RPF-WP-0063-wave2-resource-right-sizing.md
Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071)
2026-10-22 01:00:57 +02:00
RPF-WP-0064-isolated-original-openbao-restore.md
RPF-WP-0064-T10: bridge status takes no tunnel argument
2026-10-28 00:59:41 +01:00
RPF-WP-0065-netkingdom-role-claim-bindings.md
RPF-WP-0065-T04: done; founder applied and verified the platform-admin aal2 binding
2026-10-27 23:23:11 +01:00
RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md
RPF-WP-0064, RPF-WP-0066: record hub ids
2026-10-27 23:33:59 +01:00