tegwick 4b4d556d62 Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate ... Every live privileged production handler CAS-consumes through approval-engine before OpenBao. Conflict, unavailability, or a missing binding fail closed. Live production remains disabled until the durable decision record is served. Record kings-guard assent on the secret-use evidence contract. Assistant: grok Assistant-Session: 01a05f07-ae72-7781-9fcb-19efd61add00		2026-09-02 01:06:50 +02:00
..
approval-consumption.md	Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate	2026-09-02 01:06:50 +02:00
catalog-admission.md	feat: admit existing OpenBao catalog lanes	2026-08-21 08:20:33 +02:00
cli.md	Harden production authorization and service auth	2026-08-23 14:15:42 +02:00
hardening-backlog.md	Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate	2026-09-02 01:06:50 +02:00
netkingdom-security-infrastructure.md	Declare Engine/Lifecycle against security layer model v0.7	2026-08-29 11:57:47 +02:00
openbao-stage-roles.md	feat: add auth-capability lanes and pilot closeout	2026-06-29 16:58:16 +02:00
ops-warden-routing-contract.md	Document scope alignment and warden-sign readiness	2026-06-30 00:52:05 +02:00
publication-scope-policy.md	Migrate whynot-design npm catalog and docs to Forgejo registry	2026-07-09 11:38:15 +02:00
secret-use-evidence-contract.md	Implement GH-DEC-2026-003 consume-before-OpenBao PEP gate	2026-09-02 01:06:50 +02:00
service-auth.md	Harden production authorization and service auth	2026-08-23 14:15:42 +02:00
ssh-ca-signing-contract.md	Implement SECRETS-WP-0008 unblocked layer-model obligations	2026-08-29 12:52:55 +02:00
statehub-register.md	Initial commit	2026-06-28 09:03:37 +00:00
template-validation-checklist.md	Initial commit	2026-06-28 09:03:37 +00:00
warden-sign-auth-capability.md	Close warden-sign token lane	2026-06-30 01:01:55 +02:00
whynot-design-real-publish-closeout.md	Add value-safe verification and audit reporting	2026-08-23 12:33:38 +02:00