| .. |
|
inputs
|
fix: preserve unrelated live boundary rules during signing lane apply
|
2026-09-05 16:43:47 +02:00 |
|
agent-high-risk-boundary.hcl
|
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers
|
2026-10-09 12:10:21 +02:00 |
|
backup-pair-writer.hcl
|
Admit and install the backup pair writer.
|
2026-10-08 22:41:20 +02:00 |
|
credential-broker-keycape-client-secret-generate-issuer.hcl
|
RPF-WP-0054-T05: fix issuer binding after the first probe
|
2026-10-10 11:12:19 +02:00 |
|
credential-broker-warden-sign-issuer.hcl
|
feat: add credential broker token helper
|
2026-06-27 00:06:03 +02:00 |
|
credential-change-nonprod-applier.hcl
|
Close delegated prod applier pilot
|
2026-07-01 23:34:13 +02:00 |
|
credential-change-prod-applier.hcl
|
Close delegated prod applier pilot
|
2026-07-01 23:34:13 +02:00 |
|
external-secrets-activity-core.hcl
|
feat(backup): multi-host CNPG Option A CLI for activity-core
|
2026-07-22 19:50:59 +02:00 |
|
external-secrets-audit-core.hcl
|
Add audit-core ESO policy and ClusterSecretStore for railiance01
|
2026-08-13 00:58:58 +02:00 |
|
external-secrets-core-hub-database.hcl
|
feat: add hub-core database lease projections
|
2026-08-21 17:30:44 +02:00 |
|
external-secrets-email-connect.hcl
|
Add email-connect transactional SMTP and ingest custody lane.
|
2026-08-12 13:32:11 +02:00 |
|
external-secrets-forgejo.hcl
|
Add OpenBao External Secrets lane for Forgejo mailer on railiance01
|
2026-07-07 14:30:02 +02:00 |
|
external-secrets-issue-core.hcl
|
Add ESO OpenBao GitOps add-ons
|
2026-06-25 20:08:36 +02:00 |
|
external-secrets-target-revenue.hcl
|
Add OpenBao/ESO lane for target-revenue on railiance01
|
2026-08-05 17:56:39 +02:00 |
|
external-secrets-whitehat-audit-e2-02.hcl
|
Bind audit E2 retry projection to new engagement
|
2026-08-22 20:56:58 +02:00 |
|
external-secrets-whitehat-audit-e2.hcl
|
Add attended Whitehat E2 credential projection
|
2026-08-22 12:59:38 +02:00 |
|
keycape-client-secret-generate.hcl
|
RPF-WP-0054-T04: create-only broker grant keycape/client-secret-generate
|
2026-10-09 19:08:25 +02:00 |
|
keycape-factor-renewer.hcl
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
operator-custody.hcl
|
Declare live platform-admin role and policies; add attended admin check
|
2026-09-23 19:27:25 +02:00 |
|
platform-admin.hcl
|
Declare live platform-admin role and policies; add attended admin check
|
2026-09-23 19:27:25 +02:00 |
|
platform-readonly.hcl
|
Platform secret setup
|
2026-05-23 13:59:58 +02:00 |
|
secrets-engine-login-self.hcl
|
RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao
|
2026-10-09 00:31:47 +02:00 |
|
warden-sign.hcl
|
feat(openbao): add SSH engine automation for ops-warden signing
|
2026-06-18 01:06:43 +02:00 |
|
workload-kv-fluid-telegram-hall-of-helix-operator.hcl
|
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers
|
2026-10-09 12:10:21 +02:00 |
|
workload-kv-read-activity-core-eso.hcl
|
CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)
|
2026-09-23 20:00:40 +02:00 |
|
workload-kv-read-agent-harness-forgejo.hcl
|
feat(openbao): agent-harness forgejo deploy-key read policy
|
2026-07-17 23:57:54 +02:00 |
|
workload-kv-read-approval-engine-audit.hcl
|
Prepare scoped factory audit custody and enforce receiver compatibility
|
2026-09-11 02:01:57 +02:00 |
|
workload-kv-read-approval-engine-operator-client.hcl
|
Prepare the two approval client-side reader admissions
|
2026-09-09 14:41:01 +02:00 |
|
workload-kv-read-backup-object-storage.hcl
|
retarget: CCR-2026-0012 is the general backup object-store lane
|
2026-08-14 19:19:56 +02:00 |
|
workload-kv-read-binky-company-email-imap.hcl
|
CCR-2026-0007: binky IMAP on tenants/ mount + CCR allowlist
|
2026-07-17 00:09:28 +02:00 |
|
workload-kv-read-binky-qonto-api.hcl
|
CCR-2026-0008 active: tenants/binky/qonto-api lane live
|
2026-07-21 21:42:10 +02:00 |
|
workload-kv-read-core-hub-forgejo-source.hcl
|
CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft
|
2026-10-03 08:27:56 +02:00 |
|
workload-kv-read-core-hub-runtime.hcl
|
feat: prepare core hub platform onboarding
|
2026-08-20 11:18:30 +02:00 |
|
workload-kv-read-coulomb-social-backup-primary.hcl
|
Commit the prepared backup reader for both archive pairs.
|
2026-10-08 22:12:34 +02:00 |
|
workload-kv-read-email-connect-backup-primary.hcl
|
Commit the prepared backup reader for both archive pairs.
|
2026-10-08 22:12:34 +02:00 |
|
workload-kv-read-email-connect-transactional-eso.hcl
|
RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect
|
2026-09-21 19:18:59 +02:00 |
|
workload-kv-read-email-connect-transactional.hcl
|
Add email-connect transactional SMTP and ingest custody lane.
|
2026-08-12 13:32:11 +02:00 |
|
workload-kv-read-forgejo-admin.hcl
|
Document activity-core ESO read of forgejo-admin
|
2026-07-21 23:19:10 +02:00 |
|
workload-kv-read-forgejo-mailer-eso.hcl
|
Prepare bounded Kubernetes authentication recovery for three ESO lanes
|
2026-09-05 18:38:19 +02:00 |
|
workload-kv-read-forgejo-mailer.hcl
|
Add OpenBao External Secrets lane for Forgejo mailer on railiance01
|
2026-07-07 14:30:02 +02:00 |
|
workload-kv-read-informed-decision-audit.hcl
|
Prepare scoped factory audit custody and enforce receiver compatibility
|
2026-09-11 02:01:57 +02:00 |
|
workload-kv-read-informed-decision-sitting-requester-client.hcl
|
Allocate sitting-requester CCR pair and record operator gates.
|
2026-09-15 02:08:39 +02:00 |
|
workload-kv-read-informed-decision-sitting-requester-eso.hcl
|
Record native ESO result and prepare scoped self-token amendment
|
2026-10-04 23:21:55 +02:00 |
|
workload-kv-read-issue-core-runtime.hcl
|
Add credential lane readiness proposals
|
2026-06-27 23:30:29 +02:00 |
|
workload-kv-read-keycape-approval-engine-operator.hcl
|
Admit KeyCape approval-engine client custody paths and delivery
|
2026-09-08 14:53:32 +02:00 |
|
workload-kv-read-keycape-factor-read.hcl
|
Establish scoped KeyCape factor custody and verified automatic renewal
|
2026-09-13 16:25:33 +02:00 |
|
workload-kv-read-keycape-forgejo-eso.hcl
|
File Forgejo OIDC case readers as CCR-2026-0041 (ESO) and CCR-2026-0042 (consumer)
|
2026-10-09 19:55:11 +02:00 |
|
workload-kv-read-keycape-forgejo-forgejo.hcl
|
File Forgejo OIDC case readers as CCR-2026-0041 (ESO) and CCR-2026-0042 (consumer)
|
2026-10-09 19:55:11 +02:00 |
|
workload-kv-read-keycape-informed-decision-sitting-requester.hcl
|
Allocate sitting-requester CCR pair and record operator gates.
|
2026-09-15 02:08:39 +02:00 |
|
workload-kv-read-keycape-secrets-engine-approval.hcl
|
Admit KeyCape approval-engine client custody paths and delivery
|
2026-09-08 14:53:32 +02:00 |
|
workload-kv-read-keycape-secrets-engine-openbao-eso.hcl
|
Propose token self-lifecycle for the CCR-2026-0033 ESO reader
|
2026-10-07 02:08:40 +02:00 |
|
workload-kv-read-keycape-secrets-engine-openbao-operator.hcl
|
Revise KeyCape secrets-engine-openbao custody: OpenBao-only, operator reader CCR-2026-0034 (source only)
|
2026-10-06 14:26:42 +02:00 |
|
workload-kv-read-keycape-secrets-engine-requester.hcl
|
Provision scoped T03 requester custody and native requests
|
2026-09-14 02:47:32 +02:00 |
|
workload-kv-read-llm-connect-provider-secrets.hcl
|
Add credential lane readiness proposals
|
2026-06-27 23:30:29 +02:00 |
|
workload-kv-read-policy-nexus-forgejo-source.hcl
|
Approve Policy Nexus source credential lane
|
2026-08-31 23:03:48 +02:00 |
|
workload-kv-read-qonto-assistant.hcl
|
Stabilize credential-change test suite (RAILIANCE-WP-0014)
|
2026-08-11 10:28:10 +02:00 |
|
workload-kv-read-railiance-backup-offsite-lane.hcl
|
Establish railiance backup credentials in OpenBao (CCR-2026-0004).
|
2026-07-07 17:16:30 +02:00 |
|
workload-kv-read-reuse-surface-runtime-eso.hcl
|
Prepare restricted seven-source reuse reader and bounded recovery
|
2026-10-15 01:25:46 +02:00 |
|
workload-kv-read-reuse-surface-runtime.hcl
|
RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)
|
2026-10-14 23:45:00 +02:00 |
|
workload-kv-read-secrets-engine-approval-client.hcl
|
Prepare the two approval client-side reader admissions
|
2026-09-09 14:41:01 +02:00 |
|
workload-kv-read-secrets-engine-requester-client.hcl
|
Provision scoped T03 requester custody and native requests
|
2026-09-14 02:47:32 +02:00 |
|
workload-kv-read-state-hub-rename-preflight.hcl
|
Allow bounded ESO token self-validation and cleanup
|
2026-09-05 16:47:26 +02:00 |
|
workload-kv-read-target-revenue-runtime-eso.hcl
|
Prepare bounded Kubernetes authentication recovery for three ESO lanes
|
2026-09-05 18:38:19 +02:00 |
|
workload-kv-read-target-revenue-runtime.hcl
|
Add OpenBao/ESO lane for target-revenue on railiance01
|
2026-08-05 17:56:39 +02:00 |
|
workload-kv-read-template.hcl
|
Platform secret setup
|
2026-05-23 13:59:58 +02:00 |
|
workload-kv-read-tenant-engine-audit-core-sender-eso.hcl
|
RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test
|
2026-10-03 00:16:49 +02:00 |
|
workload-kv-read-whynot-design-npm-publish.hcl
|
Correct whynot credential tenant path
|
2026-06-28 01:00:12 +02:00 |
