codex 567d2c671b RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) ... Namespace custodian-agents, ServiceAccount custodian-agent (no automount, no token Secret), curated read-only ClusterRole custodian-supervised-observer and its binding, per the founder decision of 2026-10-20. Offline pytest guard asserts no forbidden resource, no write verb, no wildcard. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 605711@bnt-lap001 Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61		2026-10-20 13:38:05 +02:00
..
bao-notice	RPF-WP-0047: HSTS for bao.coulomb.social only (no includeSubDomains)	2026-09-24 00:56:22 +02:00
custodian-agents	RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02)	2026-10-20 13:38:05 +02:00
eso-token-renewer	RPF-WP-0046-T04: adopt eso-token-renewer Application (pinned b2ebe10); close RPF-WP-0045	2026-09-23 20:17:42 +02:00
informed-decision-requester	Align requester audience projection with installed ESO schema	2026-10-04 23:18:33 +02:00
openbao-secretstore	CCR-2026-0031: core-hub Forgejo source store and ExternalSecret, applied on railiance01	2026-10-03 10:11:38 +02:00
secret-annotation-guard	docs(security): record verified annotation guard and approved orphan cleanup	2026-09-28 18:14:34 +02:00