tegwick 147cf8acda feat(exec): wire real npm publish (dry-run) through secrets-engine exec ... scripts/npm-publish-demo.sh boots a throwaway OpenBao, applies + provisions the whynot-design lane, and runs `npm publish --dry-run` via `secrets-engine exec` against a scratch package. npm resolves its auth token from the injected temp .npmrc and builds/announces the tarball; the parent shell never holds the token and the temp config is cleaned up. Documented in docs/cli.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-28 12:31:43 +02:00
..
cli.md	feat(exec): wire real npm publish (dry-run) through secrets-engine exec	2026-06-28 12:31:43 +02:00
hardening-backlog.md	feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane	2026-06-28 12:28:45 +02:00
netkingdom-security-infrastructure.md	feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane	2026-06-28 12:28:45 +02:00
openbao-stage-roles.md	feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane	2026-06-28 12:28:45 +02:00
ops-warden-routing-contract.md	feat(mvp): working secrets-engine CLI for the whynot-design npm publish lane	2026-06-28 12:28:45 +02:00
statehub-register.md	Initial commit	2026-06-28 09:03:37 +00:00
template-validation-checklist.md	Initial commit	2026-06-28 09:03:37 +00:00