..
drafts
Finish companion catalog work and reconcile completed approval tasks
2026-09-27 16:15:01 +02:00
evidence
evidence(service-jwt): attended CCR-2026-0038 boundary check passed
2026-10-21 20:54:32 +02:00
proposals
Record reproducible CLI release and exact native admission requirements
2026-10-16 18:44:05 +02:00
2026-09-27-loose-end-closeout.md
Finish companion catalog work and reconcile completed approval tasks
2026-09-27 16:15:01 +02:00
approval-consumption.md
Finish companion catalog work and reconcile completed approval tasks
2026-09-27 16:15:01 +02:00
approval-service-auth.md
Changes from flex-auth to access-engine rename
2026-09-30 19:53:37 +02:00
bounded-executor-credential-lanes.md
NK-WP-0056-T02 owner answer: bounded executor credential lanes; SECRETS-WP-0017 proposed
2026-10-31 14:19:34 +01:00
canonical-request-digest-profile.md
Align authorization request digests with Go canonical wire profile
2026-10-11 19:47:45 +02:00
catalog-admission.md
Require declared human control in factory credential delivery
2026-09-10 20:16:55 +02:00
cli-release-bundle.md
build: package CLI with pinned producer verifier
2026-10-16 09:20:33 +02:00
cli.md
Bind wrapped issuance to native metadata and preserve immutable recipient attempts
2026-10-12 00:11:49 +02:00
engine-use-claim.md
Manifest the lifecycle engine as a library, a one-stage CLI, and an in-process service.
2026-10-22 18:02:21 +02:00
exec-owner-binding.md
Point exec-owner-binding at the access-engine checkout
2026-10-09 19:53:41 +02:00
founder-admission.md
feat(admission): founder-signed trust and recovery-attempt admission (WP14 T02, WP15 T05)
2026-10-21 00:30:59 +02:00
gated-actions.md
docs: publish the authoritative gated-action list for flex-auth
2026-09-06 01:27:17 +02:00
glas-claude-delivery.md
Correct metered Sonnet 5 admission and prepare native action packet
2026-09-27 17:00:33 +02:00
hardening-backlog.md
Add native rotate and persistent lane overlay states
2026-09-02 13:09:10 +02:00
keycape-isolated-consumer-continuity-plan.md
docs(recovery): deliver isolated original consumer custody plan
2026-10-17 04:23:03 +02:00
keycape-isolated-recovery-selector.md
feat(recovery): prepare owner-bound offline continuity preflight
2026-10-17 01:03:36 +02:00
keycape-openbao-consumer-custody.md
Reflect the published service-JWT login contract and proven login
2026-10-10 12:41:16 +02:00
keycape-recovery-selector.json
feat(recovery): prepare owner-bound offline continuity preflight
2026-10-17 01:03:36 +02:00
native-lane-cutover.md
Prepare exact native recipient and record approval service activation
2026-09-14 01:08:50 +02:00
netkingdom-security-infrastructure.md
Declare Engine/Lifecycle against security layer model v0.7
2026-08-29 11:57:47 +02:00
openbao-jwt-login.md
Prepare reviewed service JWT boundary verification and retain execution adoption gates
2026-10-11 14:11:59 +02:00
openbao-stage-roles.md
feat: add auth-capability lanes and pilot closeout
2026-06-29 16:58:16 +02:00
openrouter-native-access.md
Complete T03 with native OpenRouter authentication evidence
2026-09-16 02:12:45 +02:00
ops-warden-routing-contract.md
Document scope alignment and warden-sign readiness
2026-06-30 00:52:05 +02:00
pdp-access-path.md
Document exact native signer and CLI admission requirements
2026-10-16 10:48:40 +02:00
publication-scope-policy.md
Migrate whynot-design npm catalog and docs to Forgejo registry
2026-07-09 11:38:15 +02:00
railiance-clock-consumer-review.md
Finish companion catalog work and reconcile completed approval tasks
2026-09-27 16:15:01 +02:00
secret-use-evidence-contract.md
Ship secret-use snapshot surface for kings-guard
2026-09-02 01:31:23 +02:00
service-auth.md
Prepare reviewed service JWT boundary verification and retain execution adoption gates
2026-10-11 14:11:59 +02:00
service-jwt-final-acceptance.md
Prepare reviewed service JWT boundary verification and retain execution adoption gates
2026-10-11 14:11:59 +02:00
ssh-ca-signing-contract.md
Implement SECRETS-WP-0008 unblocked layer-model obligations
2026-08-29 12:52:55 +02:00
statehub-register.md
Initial commit
2026-06-28 09:03:37 +00:00
task-execution-handoff.md
Verify normalized task approval facts and preserve signed source types
2026-10-16 17:28:03 +02:00
task-scoped-openbao-execution-contract.md
Verify normalized task approval facts and preserve signed source types
2026-10-16 17:28:03 +02:00
template-validation-checklist.md
Initial commit
2026-06-28 09:03:37 +00:00
tenant-alignment.md
Bind platform OpenBao service identity to tenant zero
2026-09-27 16:43:31 +02:00
warden-sign-auth-capability.md
Close warden-sign token lane
2026-06-30 01:01:55 +02:00
whynot-design-real-publish-closeout.md
Answer the exec-path question: the front door reads the ungoverned duplicate.
2026-09-21 02:36:31 +02:00