| .. |
|
native_factory_probe
|
|
|
|
operator-browser
|
|
|
|
activate_forgejo_primary_backup.py
|
|
|
|
activity_promotion_readiness.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
agent_high_risk_boundary.py
|
|
|
|
application_archive_retention_plan.py
|
Prepare immutable application archive transfer and retention admission
|
2026-10-07 23:23:33 +02:00 |
|
application_backup_credentials.py
|
Accept both backup readers and deliver the email-connect pair.
|
2026-10-09 00:05:35 +02:00 |
|
application_backup_pair_custody.py
|
Admit and install the backup pair writer.
|
2026-10-08 22:41:20 +02:00 |
|
apply-backup-publisher-bucket-policy.py
|
Add the two publisher prefixes to the backup bucket policy.
|
2026-10-08 23:42:25 +02:00 |
|
apply-ccr0019-binding.py
|
|
|
|
apply-reuse-surface-reader-custody.py
|
Prepare reviewed attended reuse-reader custody execution
|
2026-10-15 01:57:25 +02:00 |
|
approval-client-delivery-check.py
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
approval-client-reader-preflight.py
|
|
|
|
argocd_adoption_proof.py
|
Prove pinned OpenBao ArgoCD adoption with deterministic native checks
|
2026-10-11 21:30:47 +02:00 |
|
argocd_public_transport.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
audit-core-database-lease-recovery.py
|
RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note
|
2026-10-15 00:24:15 +02:00 |
|
audit-core-recovery-preflight.py
|
RPF-WP-0015-T03: attended OpenBao reboot snapshot lane with mandatory off-OpenBao escrow
|
2026-10-14 19:49:02 +02:00 |
|
audit-core-whitehat-e2-credentials-02.py
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
audit-core-whitehat-e2-credentials.py
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
audit_core_synthetic_sender_lane.py
|
RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane
|
2026-10-14 20:30:11 +02:00 |
|
authelia_smtp_delivery.py
|
Prepare attended scoped platform mailbox admission for Authelia
|
2026-10-06 19:30:59 +02:00 |
|
backup_retention_plan.py
|
|
|
|
broker_grant_lane.py
|
RPF-WP-0054-T05: fix issuer binding after the first probe
|
2026-10-10 11:12:19 +02:00 |
|
cadence_observer_readback.py
|
Record native receiver custody and prepare actual Approval lifecycle readback
|
2026-10-15 21:40:48 +02:00 |
|
cadence_receiver_custody.py
|
Prepare exact Qonto audit custody and hourly receiver admission packet
|
2026-10-15 21:26:11 +02:00 |
|
capture-apps-pg-evidence.py
|
|
|
|
capture-reef-deployables.py
|
|
|
|
capture_forgejo_archive.py
|
|
|
|
capture_service_observation.py
|
RPF-WP-0046-T06: eso.token-renewal assurance signal; plan finished
|
2026-09-24 00:48:24 +02:00 |
|
catalog_lane_scaffold.py
|
Implement offline catalog lane scaffold generation
|
2026-10-04 02:24:40 +02:00 |
|
cleanup_nextcloud_recovery_fixture.py
|
|
|
|
consumption_mode.py
|
|
|
|
create-metered-approval-requests.py
|
Prepare exact metered requester extension with scope refusal tests
|
2026-09-27 20:34:52 +02:00 |
|
create-metered-approval-requests.sh
|
Record approved metered requester extension and six native creates
|
2026-09-27 21:08:43 +02:00 |
|
create-t03-approval-requests.py
|
Repoint live flex-auth repository path to access-engine (FLEX-WP-0020)
|
2026-09-30 18:52:08 +02:00 |
|
credential-change.py
|
RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)
|
2026-10-14 23:45:00 +02:00 |
|
credential-grants-validate.py
|
|
|
|
credential.py
|
RPF-WP-0054-T03: credential.py generate for keycape-client-secret-generate
|
2026-10-09 20:12:44 +02:00 |
|
custody-projection.py
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
custody_contract.py
|
|
|
|
decrypt_primary_forgejo_archive.py
|
|
|
|
deploy_verified_backup_bundle.py
|
|
|
|
eso_adoption_readiness.py
|
Gate ESO adoption on verified predecessors and receive release custody handoff
|
2026-10-11 23:25:20 +02:00 |
|
execute_nextcloud_retention.py
|
|
|
|
factory_audit_custody.py
|
|
|
|
factory_audit_delivery.py
|
|
|
|
fluid_telegram_custody_move.py
|
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers
|
2026-10-09 12:10:21 +02:00 |
|
forgejo-admin-pat-provision.sh
|
|
|
|
forgejo_essentials_profile.py
|
|
|
|
forgejo_package_prune.py
|
Protect digest-pinned packages and refuse partial-inventory pruning
|
2026-09-27 16:00:51 +02:00 |
|
inbound_library_imap_entry.py
|
Prepare password-free inbound-library IMAP entry for attended custody
|
2026-10-05 11:14:54 +02:00 |
|
informed_decision_requester_metadata.py
|
Record native ESO result and prepare scoped self-token amendment
|
2026-10-04 23:21:55 +02:00 |
|
install-backup-pair-writer.sh
|
Admit and install the backup pair writer.
|
2026-10-08 22:41:20 +02:00 |
|
install-backup-primary-readers.sh
|
Accept both backup readers and deliver the email-connect pair.
|
2026-10-09 00:05:35 +02:00 |
|
issuer_binding_lane.py
|
RPF-WP-0054-T05: fix issuer binding after the first probe
|
2026-10-10 11:12:19 +02:00 |
|
keycape-approval-custody-preflight.py
|
|
|
|
keycape_approval_custody.py
|
|
|
|
keycape_client_secret_generate.py
|
correct exact source case-type pin
|
2026-10-11 18:46:21 +02:00 |
|
keycape_factor_acceptance.py
|
|
|
|
keycape_factor_activate.py
|
|
|
|
keycape_factor_bootstrap.py
|
|
|
|
keycape_factor_delivery_probe.py
|
|
|
|
keycape_factor_eso_metadata.py
|
|
|
|
keycape_factor_metadata.py
|
|
|
|
keycape_factor_provider.py
|
|
|
|
keycape_factor_recovery.py
|
|
|
|
keycape_factor_renew.py
|
|
|
|
keycape_factor_renewal_metadata.py
|
|
|
|
keycape_secrets_engine_openbao_custody.py
|
Revise KeyCape secrets-engine-openbao custody: OpenBao-only, operator reader CCR-2026-0034 (source only)
|
2026-10-06 14:26:42 +02:00 |
|
kv_duplicate_retire.py
|
kv_duplicate_retire: block only on data-path grants
|
2026-10-09 12:27:43 +02:00 |
|
migrate_nextcloud_backup_account.py
|
fix(backup): send required public DAV upload marker
|
2026-10-03 21:20:21 +02:00 |
|
native_factory_acceptance.py
|
|
|
|
openbao-apply-credential-change-appliers.py
|
|
|
|
openbao-apply-external-secrets-issue-core.sh
|
|
|
|
openbao-apply-initial-config.sh
|
|
|
|
openbao-apply-operator-loopback-callback.sh
|
|
|
|
openbao-apply-policy-nexus-source-ccr.sh
|
|
|
|
openbao-apply-ssh-engine.sh
|
|
|
|
openbao-apply-token-grants.py
|
|
|
|
openbao-apply-workload-kv-lanes.sh
|
|
|
|
openbao-attended-exec.py
|
|
|
|
openbao-bootstrap-core-hub-source.sh
|
CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft
|
2026-10-03 08:27:56 +02:00 |
|
openbao-bootstrap-policy-nexus-source.sh
|
|
|
|
openbao-eso-db-token-periodic-attended.sh
|
RPF-WP-0046: periodic ESO database tokens and a daily renewer
|
2026-09-23 19:53:12 +02:00 |
|
openbao-platform-admin-callback-prune.sh
|
Add attended prune of retired bao.coulomb.social callbacks from platform-admin
|
2026-09-24 00:49:39 +02:00 |
|
openbao-platform-admin-check.sh
|
Declare live platform-admin role and policies; add attended admin check
|
2026-09-23 19:27:25 +02:00 |
|
openbao-policy-sync.sh
|
CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)
|
2026-09-23 20:00:40 +02:00 |
|
openbao-public-listener-transition.sh
|
|
|
|
openbao-reboot-snapshot.py
|
RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format
|
2026-10-14 20:04:25 +02:00 |
|
openbao-tenant-engine-audit-core-sender-eso-attended.sh
|
RPF-IN-0002: declare tenant-engine audit-core sender ESO policy, role apply script, test
|
2026-10-03 00:16:49 +02:00 |
|
openbao-tune-auth-listing.sh
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
openbao-ui-overlay-apply.sh
|
|
|
|
openbao-validate-emergency-drill-evidence.sh
|
|
|
|
openbao-validate-restore-evidence.sh
|
|
|
|
openbao-verify-authenticated.sh
|
|
|
|
openbao-verify-login-overlay.sh
|
RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06)
|
2026-10-14 23:45:00 +02:00 |
|
openbao-verify-ssh-engine.sh
|
|
|
|
openbao-verify-token-grants.py
|
|
|
|
openbao-verify.sh
|
|
|
|
openbao_open_questions_session.py
|
|
|
|
openbao_operator_loopback_callback.py
|
|
|
|
openbao_platform_admin_callback_prune.py
|
Add attended prune of retired bao.coulomb.social callbacks from platform-admin
|
2026-09-24 00:49:39 +02:00 |
|
openbao_platform_admin_check.py
|
Declare live platform-admin role and policies; add attended admin check
|
2026-09-23 19:27:25 +02:00 |
|
openbao_policy_sync.py
|
CCR-2026-0029/0030: activity-core ops_run worker token paths (proposed)
|
2026-09-23 20:00:40 +02:00 |
|
operator_matrix_lane.py
|
RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers
|
2026-10-09 12:10:21 +02:00 |
|
operators_entry_retire.py
|
ADHOC-2026-10-10: retire the deprecated operators/nextcloud entry
|
2026-10-10 15:32:02 +02:00 |
|
playwright_consumer.py
|
Prepare Playwright consumer credentials and identity activation handoff
|
2026-10-13 21:21:58 +02:00 |
|
prepare-backup-pair-slots.py
|
Prepare empty OpenBao slots for the two backup publisher pairs.
|
2026-10-08 23:13:17 +02:00 |
|
prepare-glas-anthropic.py
|
|
|
|
primary_application_archive.py
|
Prepare immutable application archive transfer and retention admission
|
2026-10-07 23:23:33 +02:00 |
|
prove-backup-publisher-prefixes.py
|
Add the two publisher prefixes to the backup bucket policy.
|
2026-10-08 23:42:25 +02:00 |
|
prove-sitting-requester-exchange.py
|
|
|
|
prove-sitting-requester-exchange.sh
|
|
|
|
prove_secret_annotation_guard.py
|
fix(security): hold annotation enforcement until ESO metadata is explicit
|
2026-09-28 15:08:00 +02:00 |
|
provision-core-hub-forgejo-source.py
|
CCR-2026-0031: choose the private probe repo with the admin token
|
2026-10-03 10:07:54 +02:00 |
|
provision-policy-nexus-forgejo-source.py
|
|
|
|
provision-reuse-surface-forgejo-source.py
|
Prepare restricted seven-source reuse reader and bounded recovery
|
2026-10-15 01:25:46 +02:00 |
|
provision-sitting-requester.py
|
|
|
|
provision-sitting-requester.sh
|
|
|
|
provision-t03-requester.py
|
|
|
|
provision_argocd_issue_core_repository.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
provisioning_window.py
|
Prepare offline attended provisioning checklists and route remaining custody gates
|
2026-10-04 00:27:00 +02:00 |
|
railiance_clock_custody.py
|
|
|
|
recovery_evidence.py
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
refresh_live_images.py
|
|
|
|
remote_exec.py
|
|
|
|
render_backup_credential_contract.py
|
Commit the prepared backup reader for both archive pairs.
|
2026-10-08 22:12:34 +02:00 |
|
repair_eso_kubernetes_auth.py
|
|
|
|
restore_forgejo_offsite_locally.py
|
|
|
|
restore_telemetry_essentials.py
|
|
|
|
revoke-reuse-surface-forgejo-source.py
|
Prepare restricted seven-source reuse reader and bounded recovery
|
2026-10-15 01:25:46 +02:00 |
|
root-custody-finish-attended.sh
|
Diagnose attended custody finish failures with safe staged receipts
|
2026-10-03 21:08:56 +02:00 |
|
root-grant-attended.sh
|
Implement attended root custody admission and crash-safe publisher
|
2026-10-03 19:44:22 +02:00 |
|
root_custody_finish.py
|
feat(backup): repair reviewed upload share after history recovery proof
|
2026-10-03 21:50:19 +02:00 |
|
root_custody_finish_entry.py
|
Diagnose attended custody finish failures with safe staged receipts
|
2026-10-03 21:08:56 +02:00 |
|
root_custody_restore_probe.py
|
Prove isolated custody recovery and prepare governed offsite finish
|
2026-10-03 20:47:48 +02:00 |
|
root_grant_attended.py
|
Implement attended root custody admission and crash-safe publisher
|
2026-10-03 19:44:22 +02:00 |
|
root_grant_publish.py
|
Prepare conditional platform-root custody document producer
|
2026-10-03 18:51:26 +02:00 |
|
scaleway_forgejo_archive.py
|
Close verified incident task and finish local workplan loose ends
|
2026-09-27 19:04:54 +02:00 |
|
secret_annotation_maintenance.py
|
fix(security): hold annotation enforcement until ESO metadata is explicit
|
2026-09-28 15:08:00 +02:00 |
|
service_assurance.py
|
|
|
|
service_jwt_lane.py
|
RPF-WP-0035-T02: CCR-2026-0038 service-JWT login lane for secrets-engine-openbao
|
2026-10-09 00:31:47 +02:00 |
|
state_hub_preflight_lane.py
|
|
|
|
state_hub_signing_acceptance.py
|
|
|
|
survey-backup-iam.py
|
Admit and install the backup pair writer.
|
2026-10-08 22:41:20 +02:00 |
|
survey-backup-pair-metadata.sh
|
Admit and install the backup pair writer.
|
2026-10-08 22:41:20 +02:00 |
|
t02-attended-window.py
|
RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane
|
2026-10-14 20:30:11 +02:00 |
|
t03-attended-delivery.py
|
Point the OpenRouter cycle at memo version 3.
|
2026-09-27 15:33:09 +02:00 |
|
t03-native-execution.py
|
Point the OpenRouter cycle at memo version 3.
|
2026-09-27 15:33:09 +02:00 |
|
t03_request_time.py
|
Renew T03 requests using Railiance time and bind native execution
|
2026-09-16 01:08:56 +02:00 |
|
task_execution_cleanup.py
|
fix(execution): retain scoped cleanup after uncertain outcomes
|
2026-10-16 01:51:53 +02:00 |
|
task_execution_grant.py
|
feat(execution): bind immutable task grants before native effects
|
2026-10-16 07:51:42 +02:00 |
|
task_execution_journal.py
|
feat: journal strict task consumption before native fixture effects
|
2026-10-16 09:20:33 +02:00 |
|
task_execution_mediator.py
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
task_execution_native_fixture.py
|
Verify exact task metadata baseline and readback
|
2026-10-16 10:48:21 +02:00 |
|
task_execution_plan.py
|
feat(execution): bind immutable task grants before native effects
|
2026-10-16 07:51:42 +02:00 |
|
telemetry_grafana_access.py
|
|
|
|
telemetry_grafana_custody.py
|
|
|
|
telemetry_primary_archive.py
|
|
|
|
telemetry_smtp_delivery.py
|
Add attended SMTP verification and exact reader admission
|
2026-09-28 11:21:57 +02:00 |
|
telemetry_smtp_entry.py
|
Prepare password-free telemetry SMTP entry for attended custody
|
2026-09-28 11:11:34 +02:00 |
|
tenant_engine_audit_core_sender_seed.py
|
CUST-WP-0075: tenant-engine sender seed helper; re-qualify RPF-WP-0035-T02/T08
|
2026-10-03 08:28:32 +02:00 |
|
verify-backup-pair-versions.py
|
Record that both backup publisher slots are at version 2.
|
2026-10-08 23:19:21 +02:00 |
|
verify_coding_agent_approle.py
|
Close RPF-WP-0025, WP-0043 T01/T05, WP-0045 T05; retire bao.coulomb.social defaults
|
2026-09-22 22:47:42 +02:00 |
|
verify_informed_decision_requester.py
|
Match native proof HTTPS egress to the service ingress peer
|
2026-10-04 23:44:47 +02:00 |
|
verify_nextcloud_offsite_restore.py
|
|
|
|
verify_playwright_access.py
|
Activate Playwright pilot with scoped consumer group and native evidence
|
2026-10-13 20:55:31 +02:00 |
|
verify_scaleway_primary_restore.py
|
|
|
|
workload_adoption_proof.py
|
Prove Target Revenue adoption and prepare bounded issue-core delivery
|
2026-10-11 22:53:54 +02:00 |
|
wp0024-owner-review.py
|
RPF-WP-0015: verify installed ops-warden against accepted published revision; list drill PVC in review check
|
2026-10-14 12:53:48 +02:00 |
|
wp0024-t02-driver-candidate.py
|
|
|
|
wp0025-broker-readiness.py
|
|
|
