codex 20db368aee RPF-WP-0035-T14: flex-auth signer custody founder gate, runbook and review dispositions ... - CCR-2026-0050: record secrets-engine-owner approval (two receipt conditions) and platform runbook review; link founder decision 18731e84. - Attended creation runbook with preconditions, rollback and negatives. - Warden routing receipt: openbao-platform-admin-login / oidc_login now selected. - Native adapter: owner-review digest excludes expires_at so reviews can precede the 120 s window (close-down checklist row 27). Nothing generated, written or applied. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 809600@bnt-lap001 Assistant-Session: 40ba228f-c8a0-4ec9-bb29-3129951afdc4		2026-10-21 01:24:45 +02:00
..
native_factory_probe
operator-browser
activate_forgejo_primary_backup.py
activity_promotion_readiness.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
agent_high_risk_boundary.py
application_archive_retention_plan.py	Prepare immutable application archive transfer and retention admission	2026-10-07 23:23:33 +02:00
application_backup_credentials.py	Accept both backup readers and deliver the email-connect pair.	2026-10-09 00:05:35 +02:00
application_backup_pair_custody.py	Admit and install the backup pair writer.	2026-10-08 22:41:20 +02:00
apply-backup-publisher-bucket-policy.py	Add the two publisher prefixes to the backup bucket policy.	2026-10-08 23:42:25 +02:00
apply-ccr0019-binding.py
apply-reuse-surface-reader-custody.py	Prepare reviewed attended reuse-reader custody execution	2026-10-15 01:57:25 +02:00
approval-client-delivery-check.py	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
approval-client-reader-preflight.py
argocd_adoption_proof.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
argocd_child_pin_drift.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
argocd_public_transport.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
audit-core-database-lease-recovery.py	RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note	2026-10-15 00:24:15 +02:00
audit-core-recovery-preflight.py	RPF-WP-0015-T03: attended OpenBao reboot snapshot lane with mandatory off-OpenBao escrow	2026-10-14 19:49:02 +02:00
audit-core-whitehat-e2-credentials-02.py	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
audit-core-whitehat-e2-credentials.py	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
audit_core_synthetic_sender_lane.py	RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane	2026-10-14 20:30:11 +02:00
authelia_smtp_delivery.py	Prepare attended scoped platform mailbox admission for Authelia	2026-10-06 19:30:59 +02:00
backup_retention_plan.py
broker_grant_lane.py	RPF-WP-0054-T05: fix issuer binding after the first probe	2026-10-10 11:12:19 +02:00
cadence_observer_readback.py	Record native receiver custody and prepare actual Approval lifecycle readback	2026-10-15 21:40:48 +02:00
cadence_receiver_custody.py	Prepare exact Qonto audit custody and hourly receiver admission packet	2026-10-15 21:26:11 +02:00
capture-apps-pg-evidence.py
capture-reef-deployables.py
capture_forgejo_archive.py
capture_service_observation.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
catalog_lane_scaffold.py	Implement offline catalog lane scaffold generation	2026-10-04 02:24:40 +02:00
ccr_intake.py	RPF-WP-0061: render-policy and plan_ref for ops-mason submissions; approvals only via sync-decision	2026-10-18 12:53:19 +02:00
cleanup_nextcloud_recovery_fixture.py
consumption_mode.py
create-metered-approval-requests.py	Prepare exact metered requester extension with scope refusal tests	2026-09-27 20:34:52 +02:00
create-metered-approval-requests.sh	Record approved metered requester extension and six native creates	2026-09-27 21:08:43 +02:00
create-t03-approval-requests.py	Repoint live flex-auth repository path to access-engine (FLEX-WP-0020)	2026-09-30 18:52:08 +02:00
credential-change.py	RPF-WP-0061-T01/T02: standard lane profile and self-service CCR submit/review-standard	2026-10-18 12:29:47 +02:00
credential-grants-validate.py
credential.py	RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate	2026-10-09 20:12:44 +02:00
custody-projection.py	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
custody_contract.py
decrypt_primary_forgejo_archive.py
deploy_verified_backup_bundle.py
eso_adoption_readiness.py	Gate ESO adoption on verified predecessors and receive release custody handoff	2026-10-11 23:25:20 +02:00
eso_attended_checks.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
execute_nextcloud_retention.py
factory_audit_custody.py
factory_audit_delivery.py
flex_auth_signer_custody.py	Add attended signer adapter with phase-aware read-only recovery	2026-10-16 18:44:07 +02:00
flex_auth_signer_native.py	RPF-WP-0035-T14: flex-auth signer custody founder gate, runbook and review dispositions	2026-10-21 01:24:45 +02:00
fluid_telegram_custody_move.py	RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers	2026-10-09 12:10:21 +02:00
forgejo-admin-pat-provision.sh
forgejo_essentials_profile.py
forgejo_package_prune.py	Protect digest-pinned packages and refuse partial-inventory pruning	2026-09-27 16:00:51 +02:00
inbound_library_imap_entry.py	Prepare password-free inbound-library IMAP entry for attended custody	2026-10-05 11:14:54 +02:00
informed_decision_requester_metadata.py	Record native ESO result and prepare scoped self-token amendment	2026-10-04 23:21:55 +02:00
install-backup-pair-writer.sh	Admit and install the backup pair writer.	2026-10-08 22:41:20 +02:00
install-backup-primary-readers.sh	Accept both backup readers and deliver the email-connect pair.	2026-10-09 00:05:35 +02:00
issuer_binding_lane.py	RPF-WP-0054-T05: fix issuer binding after the first probe	2026-10-10 11:12:19 +02:00
keycape-approval-custody-preflight.py
keycape_approval_custody.py
keycape_client_secret_generate.py	Bind mint broker validation to exact reviewed sources and track successor obligations	2026-10-17 22:55:51 +02:00
keycape_factor_acceptance.py
keycape_factor_activate.py
keycape_factor_bootstrap.py
keycape_factor_delivery_probe.py
keycape_factor_eso_metadata.py
keycape_factor_metadata.py
keycape_factor_provider.py
keycape_factor_recovery.py
keycape_factor_renew.py
keycape_factor_renewal_metadata.py
keycape_issuer_eso.py	feat: declare proposed fixed KeyCape issuer ESO source contract	2026-10-17 20:36:52 +02:00
keycape_secrets_engine_openbao_custody.py	Revise KeyCape secrets-engine-openbao custody: OpenBao-only, operator reader CCR-2026-0034 (source only)	2026-10-06 14:26:42 +02:00
kube_route.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
kv_duplicate_retire.py	kv_duplicate_retire: block only on data-path grants	2026-10-09 12:27:43 +02:00
migrate_nextcloud_backup_account.py	fix(backup): send required public DAV upload marker	2026-10-03 21:20:21 +02:00
native_factory_acceptance.py
openbao-apply-credential-change-appliers.py
openbao-apply-external-secrets-issue-core.sh
openbao-apply-initial-config.sh
openbao-apply-operator-loopback-callback.sh
openbao-apply-policy-nexus-source-ccr.sh
openbao-apply-ssh-engine.sh	openbao-apply-ssh-engine: role writer passed 'bao' twice (exit 127)	2026-10-20 23:21:40 +02:00
openbao-apply-token-grants.py
openbao-apply-workload-kv-lanes.sh
openbao-attended-exec.py	Add sitting-requester create-only token-exchange proof.	2026-09-15 20:38:47 +02:00
openbao-bootstrap-core-hub-source.sh	CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft	2026-10-03 08:27:56 +02:00
openbao-bootstrap-policy-nexus-source.sh
openbao-eso-db-token-periodic-attended.sh	RPF-WP-0046: periodic ESO database tokens and a daily renewer	2026-09-23 19:53:12 +02:00
openbao-platform-admin-callback-prune.sh	Add attended prune of retired bao.coulomb.social callbacks from platform-admin	2026-09-24 00:49:39 +02:00
openbao-platform-admin-check.sh	Declare live platform-admin role and policies; add attended admin check	2026-09-23 19:27:25 +02:00
openbao-policy-sync.sh	CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)	2026-09-23 20:00:40 +02:00
openbao-public-listener-transition.sh
openbao-reboot-snapshot.py	RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format	2026-10-14 20:04:25 +02:00
openbao-tenant-engine-audit-core-sender-eso-attended.sh	RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test	2026-10-03 00:16:49 +02:00
openbao-tune-auth-listing.sh	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
openbao-ui-overlay-apply.sh
openbao-validate-emergency-drill-evidence.sh
openbao-validate-restore-evidence.sh
openbao-verify-authenticated.sh
openbao-verify-login-overlay.sh	RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)	2026-10-14 23:45:00 +02:00
openbao-verify-ssh-engine.sh
openbao-verify-token-grants.py
openbao-verify.sh
openbao_open_questions_session.py
openbao_operator_loopback_callback.py	Preserve writable OIDC fields on the loopback callback update.	2026-09-15 02:23:22 +02:00
openbao_platform_admin_callback_prune.py	Add attended prune of retired bao.coulomb.social callbacks from platform-admin	2026-09-24 00:49:39 +02:00
openbao_platform_admin_check.py	Declare live platform-admin role and policies; add attended admin check	2026-09-23 19:27:25 +02:00
openbao_policy_sync.py	CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)	2026-09-23 20:00:40 +02:00
operator_matrix_lane.py	RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers	2026-10-09 12:10:21 +02:00
operators_entry_retire.py	ADHOC-2026-10-10: retire the deprecated operators/nextcloud entry	2026-10-10 15:32:02 +02:00
playwright_consumer.py	Prepare Playwright consumer credentials and identity activation handoff	2026-10-13 21:21:58 +02:00
prepare-backup-pair-slots.py	Prepare empty OpenBao slots for the two backup publisher pairs.	2026-10-08 23:13:17 +02:00
prepare-glas-anthropic.py
primary_application_archive.py	Prepare immutable application archive transfer and retention admission	2026-10-07 23:23:33 +02:00
prove-backup-publisher-prefixes.py	Add the two publisher prefixes to the backup bucket policy.	2026-10-08 23:42:25 +02:00
prove-sitting-requester-exchange.py	Classify sitting-requester exchange failures and retry failed receipts.	2026-09-15 20:51:28 +02:00
prove-sitting-requester-exchange.sh	Add sitting-requester create-only token-exchange proof.	2026-09-15 20:38:47 +02:00
prove_secret_annotation_guard.py	fix(security): hold annotation enforcement until ESO metadata is explicit	2026-09-28 15:08:00 +02:00
provision-core-hub-forgejo-source.py	CCR-2026-0031: choose the private probe repo with the admin token	2026-10-03 10:07:54 +02:00
provision-policy-nexus-forgejo-source.py
provision-reuse-surface-forgejo-source.py	Prepare restricted seven-source reuse reader and bounded recovery	2026-10-15 01:25:46 +02:00
provision-sitting-requester.py	Approve sitting-requester CCRs and add the attended provisioner.	2026-09-15 20:08:02 +02:00
provision-sitting-requester.sh	Approve sitting-requester CCRs and add the attended provisioner.	2026-09-15 20:08:02 +02:00
provision-t03-requester.py
provision_argocd_issue_core_repository.py	Prove Target Revenue adoption and prepare bounded issue-core delivery	2026-10-11 22:53:54 +02:00
provisioning_window.py	Prepare offline attended provisioning checklists and route remaining custody gates	2026-10-04 00:27:00 +02:00
railiance_clock_custody.py	Implement attended Railiance Clock host key delivery	2026-09-15 23:00:20 +02:00
recovery_evidence.py	Close verified incident task and finish local workplan loose ends	2026-09-27 19:04:54 +02:00
refresh_live_images.py
remote_exec.py
render_backup_credential_contract.py	Commit the prepared backup reader for both archive pairs.	2026-10-08 22:12:34 +02:00
repair_eso_kubernetes_auth.py
restore_forgejo_offsite_locally.py
restore_telemetry_essentials.py
revoke-reuse-surface-forgejo-source.py	Prepare restricted seven-source reuse reader and bounded recovery	2026-10-15 01:25:46 +02:00
root-custody-finish-attended.sh	Diagnose attended custody finish failures with safe staged receipts	2026-10-03 21:08:56 +02:00
root-grant-attended.sh	Implement attended root custody admission and crash-safe publisher	2026-10-03 19:44:22 +02:00
root_custody_finish.py	feat(backup): repair reviewed upload share after history recovery proof	2026-10-03 21:50:19 +02:00
root_custody_finish_entry.py	Diagnose attended custody finish failures with safe staged receipts	2026-10-03 21:08:56 +02:00
root_custody_restore_probe.py	Prove isolated custody recovery and prepare governed offsite finish	2026-10-03 20:47:48 +02:00
root_grant_attended.py	Implement attended root custody admission and crash-safe publisher	2026-10-03 19:44:22 +02:00
root_grant_publish.py	Prepare conditional platform-root custody document producer	2026-10-03 18:51:26 +02:00
rpf_wp_0044_t06_attended.sh	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
scaleway_forgejo_archive.py	Close verified incident task and finish local workplan loose ends	2026-09-27 19:04:54 +02:00
secret_annotation_maintenance.py	fix(security): hold annotation enforcement until ESO metadata is explicit	2026-09-28 15:08:00 +02:00
service_assurance.py
service_jwt_lane.py	RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao	2026-10-09 00:31:47 +02:00
state_hub_preflight_lane.py
state_hub_signing_acceptance.py
survey-backup-iam.py	Admit and install the backup pair writer.	2026-10-08 22:41:20 +02:00
survey-backup-pair-metadata.sh	Admit and install the backup pair writer.	2026-10-08 22:41:20 +02:00
t02-attended-window.py	RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane	2026-10-14 20:30:11 +02:00
t03-attended-delivery.py	Point the OpenRouter cycle at memo version 3.	2026-09-27 15:33:09 +02:00
t03-native-execution.py	Point the OpenRouter cycle at memo version 3.	2026-09-27 15:33:09 +02:00
t03_request_time.py	Renew T03 requests using Railiance time and bind native execution	2026-09-16 01:08:56 +02:00
task_execution_cleanup.py	fix(execution): retain scoped cleanup after uncertain outcomes	2026-10-16 01:51:53 +02:00
task_execution_grant.py	feat(execution): bind immutable task grants before native effects	2026-10-16 07:51:42 +02:00
task_execution_journal.py	Recover exact task cleanup after executor process loss	2026-10-16 16:43:20 +02:00
task_execution_mediator.py	Bound task execution by absolute call and credential deadlines	2026-10-16 17:15:00 +02:00
task_execution_native_fixture.py	Bound task execution by absolute call and credential deadlines	2026-10-16 17:15:00 +02:00
task_execution_plan.py	feat(execution): bind immutable task grants before native effects	2026-10-16 07:51:42 +02:00
task_execution_recovery.py	Recover exact task cleanup after executor process loss	2026-10-16 16:43:20 +02:00
telemetry_grafana_access.py
telemetry_grafana_custody.py
telemetry_primary_archive.py
telemetry_smtp_delivery.py	Add attended SMTP verification and exact reader admission	2026-09-28 11:21:57 +02:00
telemetry_smtp_entry.py	Prepare password-free telemetry SMTP entry for attended custody	2026-09-28 11:11:34 +02:00
tenant_engine_audit_core_sender_seed.py	CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08	2026-10-03 08:28:32 +02:00
verify-backup-pair-versions.py	Record that both backup publisher slots are at version 2.	2026-10-08 23:19:21 +02:00
verify_coding_agent_approle.py	Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults	2026-09-22 22:47:42 +02:00
verify_informed_decision_requester.py	Match native proof HTTPS egress to the service ingress peer	2026-10-04 23:44:47 +02:00
verify_nextcloud_offsite_restore.py
verify_playwright_access.py	Activate Playwright pilot with scoped consumer group and native evidence	2026-10-13 20:55:31 +02:00
verify_scaleway_primary_restore.py
workload_adoption_proof.py	RPF-WP-0044-T06: founder cluster route and attended ESO adoption script	2026-10-21 01:23:16 +02:00
wp0024-owner-review.py	RPF-WP-0015: verify installed ops-warden against accepted published revision; list drill PVC in review check	2026-10-14 12:53:48 +02:00
wp0024-t02-driver-candidate.py
wp0025-broker-readiness.py