bedab6f5ab
The warden openbao-platform-admin-login lane runs one silent child per login, fails closed on any output and self-revokes; the old runbook printed output and rolled back from a standing session that cannot exist. - scripts/openbao-platform-admin-aal2.sh (+ .py): prepare (backup + assurance claim mapping), apply (gated on this login's assurance_level=aal2, readback of bound_claims), verify, rollback from the backup receipt via a fresh lane login, rollback-body for the docs/openbao.md break-glass path. 0600 O_EXCL receipts, value-free; no stdout/stderr. - Role declaration maps /assurance/level to token metadata assurance_level. - tests/test_openbao_platform_admin_aal2.py: fake bao end-to-end. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 4515@bnt-lap001 Assistant-Session: 0bf96127-6e04-41be-bfda-d11717c3f354 |
||
|---|---|---|
| .. | ||
| archived | ||
| .gitkeep | ||
| ADHOC-2026-10-10.md | ||
| ADHOC-2026-10-11.md | ||
| ADHOC-2026-10-19.md | ||
| README.md | ||
| RPF-WP-0015-audit-core-custody-and-recovery-coordination.md | ||
| RPF-WP-0025-openbao-operator-only-access.md | ||
| RPF-WP-0027-keycape-live-secret-exposure-recovery.md | ||
| RPF-WP-0029-backup-credential-default-removal.md | ||
| RPF-WP-0035-credential-lane-implementation.md | ||
| RPF-WP-0036-platform-service-assurance.md | ||
| RPF-WP-0038-forgejo-scaleway-primary-coverage.md | ||
| RPF-WP-0039-vergabe-demo-company-database.md | ||
| RPF-WP-0040-keycape-factor-credential-custody.md | ||
| RPF-WP-0041-state-hub-105m-not-provisioning.md | ||
| RPF-WP-0042-informed-decision-sitting-requester.md | ||
| RPF-WP-0043-policy-nexus-argocd-onboarding.md | ||
| RPF-WP-0044-argocd-phase-b-adopt-existing-applications.md | ||
| RPF-WP-0045-eso-kubernetes-auth-activity-core-email-connect.md | ||
| RPF-WP-0046-eso-database-token-renewal.md | ||
| RPF-WP-0047-bao-coulomb-social-notice-page.md | ||
| RPF-WP-0048-activity-core-gitops-adoption.md | ||
| RPF-WP-0049-platform-root-custody-record-delivery.md | ||
| RPF-WP-0050-attended-provisioning-preparation.md | ||
| RPF-WP-0051-informed-decision-requester-workload-delivery.md | ||
| RPF-WP-0052-authelia-platform-smtp-admission.md | ||
| RPF-WP-0053-coulomb-paired-backup-admission.md | ||
| RPF-WP-0054-keycape-client-secret-generate-lane.md | ||
| RPF-WP-0055-keycape-client-secret-rotation-residual.md | ||
| RPF-WP-0056-playwright-consumer-admission.md | ||
| RPF-WP-0057-sign-in-diagnosis-caller-proof.md | ||
| RPF-WP-0058-reuse-private-source-reader.md | ||
| RPF-WP-0059-hourly-cadence-receiver-custody.md | ||
| RPF-WP-0060-browser-case-platform-bindings.md | ||
| RPF-WP-0061-self-service-ccr-intake.md | ||
| RPF-WP-0062-custodian-agent-observer-identity.md | ||
| RPF-WP-0063-wave2-resource-right-sizing.md | ||
| RPF-WP-0064-isolated-original-openbao-restore.md | ||
| RPF-WP-0065-netkingdom-role-claim-bindings.md | ||
| RPF-WP-0066-openbao-durable-audit-snapshots-conformance.md | ||
Current platform work
Reviewed October 13, 2026 against source workplans and the live inbox. Source files remain authoritative; the generated brief contains historical aliases. Completed plans retain their IDs and managed UUIDs, including archived plans.
| Workplan | Open tasks | Next work or dependency |
|---|---|---|
| RPF-WP-0015 (active) | T02, T03 | Recovery windows, sender/abort owner and snapshot/quorum/access evidence |
| RPF-WP-0027 (blocked) | T03, T06 | Resolver and custody owner contracts |
| RPF-WP-0035 (blocked) | T02, T03, T07, T08, T10, T12 | Execution integration and owner acceptance; verified-source compiler correction tested October 13 |
| RPF-WP-0036 (blocked) | T03, T04, T06 | Bounded scheduler, telemetry receiving contract and ownership returns |
| RPF-WP-0038 (blocked) | T04 | Durable caller, verified inventory and quota/retention; expiration/cutover hold persists |
| RPF-WP-0043 (blocked) | T03, T04 | Owner values/render diff, then root automation before adoption |
| RPF-WP-0044 (blocked) | T04, T06, T07 | Attended issue-core issuer login, ordered ESO adoption and root automation |
| RPF-WP-0048 (blocked) | T02 | Activity-core promotion evidence |
| RPF-WP-0053 (proposed) | T01, T02, T03, T04, T05 | Paired archive execution/custody, retrieval/recovery and monitoring admission |
| RPF-WP-0055 (backlog) | T01 | Unpromoted rotation residual; do not implement without demand/risk promotion |
| RPF-WP-0056 (blocked) | T03, T06 | Pilot/setup implemented; Custodian coordination requested for identity, transport and real human/agent proof |
October 13 review corrected WP-0038-T04's stale todo state to the documented
wait. RPF-IN-0012 remains an open independent execution/wrapped-delivery review;
the compiler fix does not close it. Playwright publication is resolved; its new
Platform workplan records the user-requested group and actual activation evidence.
Routine synchronization uses the exact-commit Repo Manager receipt described in AGENTS.md. Legacy alias repair remains the scoped WP-0036-T06 dependency.