tegwick 3cd9955ac9 Implement SECRETS-WP-0008 unblocked layer-model obligations ... Load pep-stance.yaml as the live unreachable-engine gate and record named stance fields on privileged evidence. Classify evidence, queue load-bearing records in a local outbox, and add heartbeat/drain commands that never sit on a mutation path. Publish proposed SSH-CA and secret-use evidence contracts without adding an OpenBao SSH-CA write. T02 (access-engine decision records) and T06 (no standing credential) stay wait on external endpoints. Assistant: grok Assistant-Session: 01a04cea-cb33-7c63-bad7-c1b0f9f0076b		2026-08-29 12:52:55 +02:00
..
catalog-admission.md	feat: admit existing OpenBao catalog lanes	2026-08-21 08:20:33 +02:00
cli.md	Harden production authorization and service auth	2026-08-23 14:15:42 +02:00
hardening-backlog.md	Harden production authorization and service auth	2026-08-23 14:15:42 +02:00
netkingdom-security-infrastructure.md	Declare Engine/Lifecycle against security layer model v0.7	2026-08-29 11:57:47 +02:00
openbao-stage-roles.md	feat: add auth-capability lanes and pilot closeout	2026-06-29 16:58:16 +02:00
ops-warden-routing-contract.md	Document scope alignment and warden-sign readiness	2026-06-30 00:52:05 +02:00
publication-scope-policy.md	Migrate whynot-design npm catalog and docs to Forgejo registry	2026-07-09 11:38:15 +02:00
secret-use-evidence-contract.md	Implement SECRETS-WP-0008 unblocked layer-model obligations	2026-08-29 12:52:55 +02:00
service-auth.md	Harden production authorization and service auth	2026-08-23 14:15:42 +02:00
ssh-ca-signing-contract.md	Implement SECRETS-WP-0008 unblocked layer-model obligations	2026-08-29 12:52:55 +02:00
statehub-register.md	Initial commit	2026-06-28 09:03:37 +00:00
template-validation-checklist.md	Initial commit	2026-06-28 09:03:37 +00:00
warden-sign-auth-capability.md	Close warden-sign token lane	2026-06-30 01:01:55 +02:00
whynot-design-real-publish-closeout.md	Add value-safe verification and audit reporting	2026-08-23 12:33:38 +02:00