85 commits

Author	SHA1	Message	Date
codex	c0227108d2	Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-22 01:05:32 +02:00
codex	2d257c2748	CUST-WP-0071: Forgejo server reconciled; wave 1 complete ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 22:59:37 +02:00
codex	d4e5bb8710	CUST-WP-0071: wave 1 applied (except Forgejo server); evidence ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 21:08:27 +02:00
codex	dc1d19c89c	CUST-WP-0073: T02 accepted (gated-executor on railiance01), T04 documented; plan blocked only on founder-triggered T05 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 23:42:15 +02:00
codex	be589184c7	CUST-WP-0073: attended cutover steps 1-7 done; record evidence and remaining step 8/9 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 23:26:28 +02:00
codex	158930139e	CUST-WP-0073: step-9 Kubernetes denial proof from the agent account (597/597); verifier retries and separates grants from errors; issuance script ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 23:05:33 +02:00
codex	be1b9aa680	CUST-WP-0073: railiance01 cutover steps 2-4 evidence; fix step-9 verifier identity and subresource probes ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 22:42:19 +02:00
codex	403222f8c6	CUST-WP-0073: attended staging of custodian-agents distro; interop probe evidence; harness install ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 20:54:21 +02:00
codex	462264605d	Resolve allocation namespace owners from maintained sources	2026-10-19 15:24:50 +02:00
codex	8e67cfbb49	Refresh live allocation baseline for synthetic sizing review	2026-10-19 14:52:41 +02:00
codex	03eb3fbd3e	Document and verify installed local brief policy	2026-10-19 14:45:20 +02:00
codex	fd4a3ba00e	Prepare staged index generation and reconcile implementation paths	2026-10-19 11:30:16 +02:00
codex	81f2f59649	security: verify authenticated Forgejo routes live (FORGE6-ROUTES-001 r3) ... Revision 2 live run passed 24/25; the clean merge hit Forgejo's 405 during the mergeability recheck. Revision 3 waits for mergeable, retries only 405 (max 3) and records status codes. 7 boundary tests, isolated rehearsal (27 checks) and the attended live run (26/26, verified, cleanup confirmed) pass. Revision 2 proposal and receipts retained. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-18 02:33:46 +02:00
codex	e9acd218ce	docs: record completed resolver-helper source repair	2026-10-14 02:01:09 +02:00
codex	c53ebce2b7	security: retain native LDAP group maintenance verification	2026-10-14 01:26:39 +02:00
codex	880c224a4b	security: record platform group boundary regression and repair	2026-10-14 00:48:47 +02:00
codex	1bb46638a0	security: retain legacy LDAP retirement verification and open gaps	2026-10-14 00:24:23 +02:00
codex	f5925c6282	security: record guarded Playwright activation and collision verification	2026-10-13 23:47:30 +02:00
codex	71b99b3ff9	security: link tested Playwright registration owner implementation	2026-10-13 23:21:33 +02:00
codex	90e2b47152	security: record verified realm repair and Playwright recovery return	2026-10-13 22:51:40 +02:00
codex	f18c7579f0	security: retain scoped MFA diagnostic evidence and remaining owner boundaries	2026-10-13 22:26:46 +02:00
codex	3a850beb06	security: record verified key recovery and accept Playwright delivery coordination	2026-10-13 21:58:13 +02:00
codex	1d9814b887	security: record verified SOPS write and custody handoff repair	2026-10-13 21:05:55 +02:00
codex	a0a9087790	security: record conditional service Secret caller repair	2026-10-13 20:22:55 +02:00
codex	bb3e2db07e	security: record KeyCape custody caller reconciliation and native config proof	2026-10-13 19:49:24 +02:00
codex	873c595bbb	security: locate legacy submodule objects without weakening coverage	2026-10-13 18:53:08 +02:00
codex	9c18673da1	security: close unauthenticated runner Docker exposure with native proof	2026-10-13 18:50:05 +02:00
codex	c12c087b89	security: prepare and rehearse contained Forgejo HTTP acceptance	2026-10-13 18:26:47 +02:00
codex	a3b56d689f	security: verify forge scanner expansion across 166 repositories	2026-10-13 17:59:50 +02:00
codex	9af8689327	security: close sync deadline fix and checkpoint scoped forge expansion	2026-10-13 16:55:37 +02:00
codex	8f770e1eea	security: recover Forgejo scanner custody and prove restart acceptance	2026-10-13 15:07:30 +02:00
codex	e570433060	security: verify Forgejo write paths and isolate lifecycle coverage gaps	2026-10-13 13:40:26 +02:00
codex	eb93eeedfd	security: preserve verified Forgejo scanner activation and reconcile recovery	2026-10-13 11:31:06 +02:00
codex	78081dabf2	security: record introduced-history scanner proof and native admission gates	2026-10-12 18:53:18 +02:00
codex	6502bfe4d8	security: establish native Forgejo receive-hook baseline	2026-10-12 18:15:56 +02:00
codex	355b6b9720	security: verify staged-secret enforcement across 22 workstation checkouts	2026-10-12 17:48:43 +02:00
codex	2544b8703e	docs(security): record scanner proof and enforcement gaps	2026-10-12 16:51:40 +02:00
codex	e2dbe1267f	docs(security): record current-profile admin bootstrap repair	2026-10-12 15:03:59 +02:00
codex	6cdf1d4ad8	docs(security): record rotation output repair and adoption gap	2026-10-12 12:55:41 +02:00
codex	6af985b115	security: record private SOPS recovery and remaining caller gaps	2026-10-12 12:11:24 +02:00
codex	6500726f65	security: assess custody requirements against repaired helper paths	2026-10-12 10:56:27 +02:00
codex	0e25826919	security: record bootstrap custody repair and native acceptance gates	2026-10-12 09:42:49 +02:00
codex	1d57add0c3	security: record PDP transport repair and authentication follow-through	2026-10-12 08:29:12 +02:00
codex	149b08b543	Review NetKingdom security architecture and repair MFA recovery boundary	2026-10-12 07:31:13 +02:00
codex	5328a6a8b3	Include critical-path owners in flow reporting and record verified Argo transport	2026-10-11 22:54:28 +02:00
codex	c332220f58	Retain final security source synchronization and clean owner checkpoint	2026-10-11 19:56:53 +02:00
codex	ea8a748702	Record verified KEY39 source acceptance and tested execution components	2026-10-11 19:53:55 +02:00
codex	cdac98dfd4	Freeze reviewed KEY39 source-design decision publication packet	2026-10-11 19:04:01 +02:00
codex	35252d35d7	Record verified final security checkpoint synchronization	2026-10-11 18:48:53 +02:00
codex	f5c6f8cfa8	Settle reviewed security source integrations and workplan inventory	2026-10-11 18:47:12 +02:00