coulomb/secrets-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 5f85c784d9 SECRETS-WP-0017: State Hub sync write-back main tegwick 2026-10-31 15:36:26 +01:00
  • 27071f4641 SECRETS-WP-0017: approved by the founder (proposed -> ready), NK-WP-0056-T02 follow-up tegwick 2026-10-31 15:35:13 +01:00
  • bad922df17 SECRETS-WP-0017: State Hub task ids tegwick 2026-10-31 14:53:54 +01:00
  • e84e178ee0 SECRETS-WP-0017: blocked_on uses the hub enum; reason in blocking_reason tegwick 2026-10-31 14:52:45 +01:00
  • 9023cbb197 SECRETS-WP-0017: route human gates to hub decisions (NK-WP-0056-T02 follow-up) tegwick 2026-10-31 14:49:13 +01:00
  • 006114ff95 SECRETS-WP-0017: State Hub ids written back by fix-consistency tegwick 2026-10-31 14:42:52 +01:00
  • 2036c24893 SECRETS-WP-0017: topic_slug custodian, as SECRETS-WP-0016, so fix-consistency registers it tegwick 2026-10-31 14:36:17 +01:00
  • 8ec5aff1a6 NK-WP-0056-T02 owner answer: bounded executor credential lanes; SECRETS-WP-0017 proposed tegwick 2026-10-31 14:19:34 +01:00
  • 65a3dbe103 SECRETS-WP-0015-T04: phase B client-secret custody proposal and ISRG trust status tegwick 2026-10-27 21:15:25 +01:00
  • 9d3de49000 SECRETS-WP-0015-T04: record isolated original OpenBao restore (RPF-WP-0064); consumer run awaits phase B tegwick 2026-10-24 11:42:57 +02:00
  • bfa1b3b3d5 SECRETS-WP-0015-T04: record NK49 T40/T18 issuer evidence; consumer continuity still waits on OpenBao recovery tegwick 2026-10-23 20:09:05 +02:00
  • a14fbc0a03 SECRETS-WP-0015-T04: attempt-host admission anchor installed and self-tested tegwick 2026-10-23 09:25:00 +02:00
  • f211525f00 Keep serve on the live lifecycle path until the job stream ends. tegwick 2026-10-22 18:15:23 +02:00
  • 06dfe12c18 Manifest the lifecycle engine as a library, a one-stage CLI, and an in-process service. tegwick 2026-10-22 18:02:21 +02:00
  • 3e3f8fc629 Record the definition-of-ready review for SECRETS-WP-0016. tegwick 2026-10-22 17:49:29 +02:00
  • f6d2940add Record the hub ids for SECRETS-WP-0016. tegwick 2026-10-22 17:47:45 +02:00
  • 9a8938be3e Align the lifecycle intent with the accepted engine blueprint. tegwick 2026-10-22 17:46:15 +02:00
  • 39314c18b6 chore(workplans): record founder decisions 18731e84 (approve) and 9f9d0d88 (A); 4fab263d deferred tegwick 2026-10-21 21:10:22 +02:00
  • 745ad146b5 evidence(service-jwt): attended CCR-2026-0038 boundary check passed tegwick 2026-10-21 20:54:32 +02:00
  • 0d4f4b5cc2 test(human-control): admit the serving path so the claim refusal is what is tested tegwick 2026-10-21 08:48:55 +02:00
  • 551dd76dc3 chore(registry,workplans): refresh reuse-surface entry; record WP14/WP15 upstream critical paths tegwick 2026-10-21 08:41:59 +02:00
  • 0aeb5a29a9 chore(workplans): WP15 T04 owns attempt-host admission anchor; confirm NK49 pins tegwick 2026-10-21 01:26:40 +02:00
  • 0f44fbeea1 chore(workplans): record founder approval in principle for WP14/WP15 T04 gates tegwick 2026-10-21 00:56:29 +02:00
  • 302a14046d chore(workplans): route WP15 T04 founder gate to hub decision tegwick 2026-10-21 00:34:15 +02:00
  • ede0922159 chore(workplans): route WP14 T04 founder gate to hub decision; sync task ids tegwick 2026-10-21 00:33:16 +02:00
  • ebd8e49aff feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05) tegwick 2026-10-21 00:30:59 +02:00
  • 497040c58c build: keep generated orientation brief local and untracked tegwick 2026-10-19 13:44:06 +02:00
  • 510d2922ab build: adopt staged records and retain reviewed orientation snapshot tegwick 2026-10-19 13:30:57 +02:00
  • 691dc74236 docs(recovery): deliver isolated original consumer custody plan tegwick 2026-10-17 04:23:03 +02:00
  • c59bbf568c feat(recovery): prepare owner-bound offline continuity preflight tegwick 2026-10-17 01:03:36 +02:00
  • 535681052c Record verified inert pre-key CLI installation tegwick 2026-10-16 21:06:22 +02:00
  • a4f1802b72 Record inert native CLI source and configuration selection tegwick 2026-10-16 20:58:30 +02:00
  • 3718e60d73 Record reproducible CLI release and exact native admission requirements tegwick 2026-10-16 18:44:05 +02:00
  • 4dd004a225 Verify normalized task approval facts and preserve signed source types tegwick 2026-10-16 17:28:03 +02:00
  • 5a2099f400 Document exact native signer and CLI admission requirements tegwick 2026-10-16 10:48:40 +02:00
  • ff1a13dabd feat: require strict signed task authorization before approval consumption tegwick 2026-10-16 09:20:57 +02:00
  • ebca4f5adb build: package CLI with pinned producer verifier tegwick 2026-10-16 09:20:33 +02:00
  • c80a944105 fix(auth): authenticate producer-signed decisions before authorization tegwick 2026-10-16 07:51:44 +02:00
  • 6bd7129eac docs(reuse): establish reviewed NetKingdom security capabilities tegwick 2026-10-14 06:45:46 +02:00
  • d379a3dfba fix: confine PDP checks to the admitted local transport tegwick 2026-10-12 08:27:37 +02:00
  • 0db6adef69 Bind wrapped issuance to native metadata and preserve immutable recipient attempts tegwick 2026-10-12 00:11:49 +02:00
  • 58129de8f1 Return not-yet-ready attended items to owners (2026-10-11) tegwick 2026-10-11 21:08:44 +02:00
  • 987db9c913 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 19:53:01 +02:00
  • 3ffb6a138e Align authorization request digests with Go canonical wire profile tegwick 2026-10-11 19:47:45 +02:00
  • d5ff4c7421 Retain reviewed work-record index and synchronization metadata tegwick 2026-10-11 18:45:52 +02:00
  • d8edd9e516 Bind typed execution context across authorization requests tegwick 2026-10-11 16:28:54 +02:00
  • e24437607b chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 14:31:52 +02:00
  • da9285803d Close verified local pre-consume readiness guard task tegwick 2026-10-11 14:28:26 +02:00
  • e01f067324 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-11 14:21:06 +02:00
  • 97dfa5ea8f Refuse login-only protected execution before consuming approval tegwick 2026-10-11 14:19:30 +02:00
  • 4378ec1fc2 Prepare reviewed service JWT boundary verification and retain execution adoption gates tegwick 2026-10-11 14:11:59 +02:00
  • 443c2698c3 Validate accepted security layer v0.8 owner declaration tegwick 2026-10-11 02:21:25 +02:00
  • 999970cd25 Build the access-engine binary in the approval exercise tool tegwick 2026-10-10 15:26:24 +02:00
  • 9ec4e0bea5 Keep ambient tokens out of the service-JWT OpenBao login tegwick 2026-10-10 13:26:20 +02:00
  • 1732c419d2 Reflect the published service-JWT login contract and proven login tegwick 2026-10-10 12:41:16 +02:00
  • 17da408ea3 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-10 10:20:22 +02:00
  • a963a77bc7 Close SECRETS-WP-0012-T03: service-JWT OpenBao login probe passed tegwick 2026-10-10 10:19:19 +02:00
  • 46f218b379 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 20:10:53 +02:00
  • ab2578d4c1 Record the written probe input for SECRETS-WP-0012-T03 tegwick 2026-10-09 20:10:13 +02:00
  • 86472f0d99 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:55:01 +02:00
  • 7c9b5d9937 Point exec-owner-binding at the access-engine checkout tegwick 2026-10-09 19:53:41 +02:00
  • 1d075e3ab4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-09 19:21:02 +02:00
  • e94dc07950 Unblock SECRETS-WP-0012-T03 on the applied CCR-2026-0038 JWT role tegwick 2026-10-09 19:19:57 +02:00
  • 2f35928ca9 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 12:27:08 +02:00
  • 75b7788731 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-08 12:22:15 +02:00
  • 80d52d85b3 Record the single remaining gate for SECRETS-WP-0009-T03. tegwick 2026-10-08 12:21:19 +02:00
  • 204ccbf27a Point the KeyCape OpenBao consumer command at the operator tunnel tegwick 2026-10-07 09:17:30 +02:00
  • 24ebb153f1 chore(consistency): record SECRETS-WP-0012-T04 hub ID tegwick 2026-10-06 14:15:12 +02:00
  • 8db15662bb chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-06 14:14:10 +02:00
  • b8094f701b Read the secrets-engine-openbao client secret in memory from OpenBao tegwick 2026-10-06 14:13:41 +02:00
  • 6941610b8d chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-06 13:40:44 +02:00
  • 61bb18d5a7 chore(consistency): record SECRETS-WP-0012 hub IDs tegwick 2026-10-06 13:40:19 +02:00
  • 4d5fcef610 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-06 13:40:09 +02:00
  • a3897c2317 Name the secrets-engine-openbao consumer custody coordinates. tegwick 2026-10-06 13:39:29 +02:00
  • be8fab0332 Record the passed IR-WP-0005 key-check delivery. tegwick 2026-10-04 17:13:00 +02:00
  • 3149654609 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-03 03:55:32 +02:00
  • 7844e366a4 chore(consistency): sync task status from DB [auto] custodian-sync 2026-10-03 03:15:18 +02:00
  • e17259b618 CUST-WP-0075-T03: route human gates to hub decisions tegwick 2026-10-03 03:14:47 +02:00
  • bd521b376c Minor update tegwick 2026-10-03 00:31:25 +02:00
  • 289a73519e chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-30 19:55:25 +02:00
  • fda9708b9a Changes from flex-auth to access-engine rename tegwick 2026-09-30 19:53:37 +02:00
  • 1c186612ff chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-29 00:27:03 +02:00
  • 3769d39168 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-28 23:33:09 +02:00
  • ccd057adb4 Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R2 credential provisioning) tegwick 2026-09-28 23:31:23 +02:00
  • 560da4d678 Document archival of duplicate bootstrap Hub record tegwick 2026-09-28 10:49:02 +02:00
  • 3154b83cb2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-28 10:44:59 +02:00
  • 8ff1b10176 Sync generated work-record index with blocked workplans tegwick 2026-09-28 10:44:20 +02:00
  • c0c60b7bc2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-28 10:43:44 +02:00
  • 62192028d6 Reconcile completed evidence and block remaining external acceptance tegwick 2026-09-28 10:43:27 +02:00
  • dda7aa6a46 docs: record consumed metered approvals and failed attempt tegwick 2026-09-27 23:20:04 +02:00
  • 08936d0910 Record confirmed spend and completed native credential request creation tegwick 2026-09-27 21:18:17 +02:00
  • 97cde1740d Preserve accepted budget renewal candidate and native action bindings tegwick 2026-09-27 20:34:53 +02:00
  • 0b49b7e82f Preserve unsigned EUR 10 native activation candidate and evaluator bindings tegwick 2026-09-27 19:00:38 +02:00
  • 11cc0d5452 Correct metered Sonnet 5 admission and prepare native action packet tegwick 2026-09-27 17:00:33 +02:00
  • 46a54acc0c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-27 16:45:40 +02:00
  • f0d82908e9 Bind platform OpenBao service identity to tenant zero tegwick 2026-09-27 16:43:31 +02:00
  • cbe218b26a Refresh work index after closing existing tasks tegwick 2026-09-27 16:16:45 +02:00
  • 66b1a9cb35 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-27 16:16:19 +02:00
  • e33f9c3ca5 Finish companion catalog work and reconcile completed approval tasks tegwick 2026-09-27 16:15:01 +02:00
  • 41e4c4a3d8 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-27 16:02:02 +02:00