codex 8b57d270de RPF-WP-0069: answer NK-WP-0056-T02; add workload-kv-write-next-version; CCR-2026-0058 (proposed) ... Owner answer for the bounded executor (hub 9d08288d): one Kubernetes role per lane for sso/nk-bind-executor; new contract-only request type for a CAS next-version write (no create, metadata or delete, 15m, agents fenced); CCR-2026-0058 drafted as proposed, not approved; audit sender in the CCR-2026-0021/0022 shape once audit-core admits it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87		2026-10-31 14:21:35 +01:00
..
auth	RPF-WP-0065-T04: rebuild founder runbook for the silent warden lane	2026-10-27 22:46:31 +01:00
email-connect-platform-smtp	Prepare supervised email-connect SMTP foundation and projection	2026-10-31 12:00:57 +01:00
eso-auth-recovery	RPF-WP-0045: plan Kubernetes-auth migration for openbao-activity-core and openbao-email-connect	2026-09-21 19:18:59 +02:00
fluid-telegram	RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers	2026-10-09 12:10:21 +02:00
policies	RPF-WP-0069: answer NK-WP-0056-T02; add workload-kv-write-next-version; CCR-2026-0058 (proposed)	2026-10-31 14:21:35 +01:00
root-grant	docs(custody): close producer delivery with verified provider recovery	2026-10-03 21:59:29 +02:00
ssh	OpenBao agt-role: allow permit-pty extension for agt-custodian (CUST-WP-0073-T02, WARDEN-WP-0045)	2026-10-20 20:34:47 +02:00
state-hub-preflight	fix(security): prevent ESO copying source annotations (CUST-WP-0073)	2026-09-28 15:56:50 +02:00
backup-primary-serviceaccounts.yaml	Commit the prepared backup reader for both archive pairs.	2026-10-08 22:12:34 +02:00