196 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	b31285a83e	Close verified tenant-admin implementation with live residual handoffs ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:30:45 +02:00
custodian-sync	9f40b343cd	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-13: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:30:14 +02:00
tegwick	62d6f8b0c7	Record and pin verified account journey release ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:29:43 +02:00
tegwick	502a8e01d7	Run journey CI in a pinned Python environment ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:22:17 +02:00
custodian-sync	3e9ccf2671	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-13: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:21:08 +02:00
tegwick	1127f852dd	Implement role-based account journeys with database and browser acceptance suites ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 12:20:02 +02:00
tegwick	75750c0036	Record live account-clarity checks and remaining role journey acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 10:13:42 +02:00
custodian-sync	02dbe9e028	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-13: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 10:13:22 +02:00
custodian-sync	9515e2ffda	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-13: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 10:09:27 +02:00
tegwick	a9ff77d21d	Clarify account session controls and add authenticator recovery guidance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 10:09:01 +02:00
tegwick	61dc76739f	Record generated State Hub recovery task bindings ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-12 17:10:41 +02:00
custodian-sync	840c86e2d1	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-12: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-12 17:06:22 +02:00
tegwick	90d809a486	Record recovery rollout and authoritative access catalogue follow-up ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-12 10:50:35 +02:00
tegwick	e54b6ee970	Add account recovery, visible access records and shared sign-out handoff ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-12 10:34:44 +02:00
tegwick	7330c25d80	docs: record native onboarding and completed operator navigation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 01:08:32 +02:00
custodian-sync	b263da37eb	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-12: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:59:52 +02:00
tegwick	d177d47975	fix: select existing tenants by name in the operator portal ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:51:57 +02:00
custodian-sync	3758a4bb5e	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-12: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:51:38 +02:00
custodian-sync	fc92ac16c9	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-12: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:46:18 +02:00
tegwick	655dce7165	fix: expose operator navigation and protected portal logout ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:37:17 +02:00
custodian-sync	9657b72067	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-12: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-12 00:31:03 +02:00
tegwick	3c85e563ee	fix: preserve tenant creation metadata and report authority denial ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc	2026-09-11 20:52:47 +02:00
tegwick	b9ae48b00c	Point identity and evidence mappings to current canon owners ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b	2026-09-06 01:39:09 +02:00
tegwick	c431915d56	Hygiene: SCOPE stance sentence, stack/architecture stubs, first-session archive ... Record the published fail-closed PEP stance in SCOPE, fill the agent stack and architecture stubs from the shipped layout, and retire the first-session protocol now that USER-WP-0001–0024 exist. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 14:37:38 +02:00
tegwick	df976512df	Refresh work-record index ... USER-WP-0024 and its remaining tasks are finished. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 14:23:08 +02:00
custodian-sync	c0bf3d1197	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-29: - update .custodian-brief.md for user-engine Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 12:54:51 +02:00
tegwick	4349758608	Implement USER-WP-0024 security layer conformance ... Declare Engine/PIP machine-readably, publish a total fail-closed PEP stance map, stop minting local decision ids on engine-unavailable DENY, bind allows to a 30s request lifetime, confine the local authorization double, classify evidence and emit a denial/revocation heartbeat, and prove access-control facts remain claims. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 12:53:16 +02:00
repo-manager	c7b6148a70	chore(registrar): assign State Hub identifiers ... Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 12:10:32 +02:00
custodian-sync	86407be730	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-29: - update .custodian-brief.md for user-engine Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 12:10:31 +02:00
tegwick	bcc26fa0b2	Ignore .repo-manager local index ... Match the other domain repos so registrar reconciliation can run on a clean worktree. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 11:59:20 +02:00
tegwick	96430299b7	Declare Engine/PIP and open USER-WP-0024 for layer conformance ... Adopt security-layer-model v0.7 in INTENT.md in this repository's own voice, restate SCOPE.md from that declaration, and record the scope-versus-implementation assessment. USER-IN-0001 is answered; runtime follow-through is USER-WP-0024. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb	2026-08-29 11:56:06 +02:00
tegwick	7961518be5	Refresh work-record index ... Regenerated by fix-consistency; adds the inbound layer-declaration intake. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2564823@bnt-lap001 Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9	2026-08-29 02:45:20 +02:00
repo-manager	c5b55036d3	repo.work.create_intake USER-IN-0001 ... correlation_id: 6fa20b48-a3c2-4a5e-807b-80660896608e reason: Request own-voice layer declaration under §11 source: repo-manager Assistant: claude-code Assistant-Model: opus Assistant-Process: 2564823@bnt-lap001 Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9	2026-08-28 23:02:12 +02:00
tegwick	7ea90b8fda	Point layering note at the published standard ... The layer model is now published as net-kingdom/canon/standards/security-layer-model_v0.1.md (proposed) and ratified by gate-house GH-DEC-2026-001. The note previously said the standard was not yet written. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2564823@bnt-lap001 Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9	2026-08-28 21:21:07 +02:00
tegwick	70b7244442	Note NetKingdom layering review in INTENT ... Records this repository's layer in the NetKingdom IT-security layer model (Taxonomy / Tooling / Engines / Staff) and what should change in this INTENT as a result. Links to the review that established the model: gate-house/history/2026-08-28-security-layer-model-and-gate-house-recut.md The note flags pending adaptation only; the body is unchanged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2564823@bnt-lap001 Assistant-Session: 2a7ed827-4928-4b9f-8613-9135c9cadfe9	2026-08-28 20:33:43 +02:00
codex	a87a794cc9	fix(workplans): adopt ADR-007 derived identifiers for unregistered records ... These workplans exist only in the retired local hub. Their random pre-ADR-007 identifiers are refused by C-06 as stale references, so they cannot be registered. Deriving from the canonical record id takes no identity from anything: central does not hold them and the old ids die with the cache. Records central already holds were deliberately left untouched. Refs CUST-WP-0068-T06 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 20:26:33 +02:00
custodian-sync	24ce8b7637	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-25: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 20:04:33 +02:00
codex	d9e619756f	docs(agents): repoint remote State Hub URL to the in-cluster address ... The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the workstation. On railiance01 the State Hub runs in the cluster on that same machine, so the request left the box and came back to reach a local service. Refs CUST-WP-0067-T07 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 00:22:18 +02:00
tegwick	a8ced85258	Refresh final-assessment to the finished USER-WP-0001–0023 surface ... Replace the in-memory/no-UI MVP note with what is actually shipped: portal, PostgreSQL, live flex-auth A2, and the remaining operator residuals.	2026-08-19 14:48:39 +02:00
tegwick	275bfd530b	Update SCOPE to the finished USER-WP-0001–0023 surface ... Replace the WP-0015 planning note with the shipped in/out boundary, published NetKingdom contracts, operator residuals, and an INTENT assessment. Fill the repo-boundary neighbor list to match.	2026-08-19 14:42:28 +02:00
tegwick	3a6249b4c6	chore(consistency): mark USER-WP-0022 finished in work records	2026-08-19 14:35:05 +02:00
custodian-sync	7a6d1516a7	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-19: - update .custodian-brief.md for user-engine	2026-08-19 14:34:57 +02:00
tegwick	cb67b4318c	Finish USER-WP-0022; leave public registration fail-closed ... In-repo journey, recovery, and security matrix are complete (150 tests). T03/T04 stay cancelled at coulomb-social and KeyCape. Production enablement remains an operator flag plus governed verification and SMTP credentials.	2026-08-19 14:34:00 +02:00
tegwick	96345556de	chore(consistency): mark USER-WP-0023 finished in work records	2026-08-19 14:25:37 +02:00
custodian-sync	b5f8f1cc20	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-19: - update .custodian-brief.md for user-engine	2026-08-19 14:25:31 +02:00
tegwick	108bb9a2de	Close USER-WP-0023 after live A2 enforce evidence ... flex-auth-user-engine is enforce on sha256:138aa347. Probe from user-engine-8569d7cb87-fp7px: 200 with the projected token, 401 without, 403 when representing tenant-engine. Record fsGroup 10001 so uid 10001 can read the projected caller token.	2026-08-19 14:24:33 +02:00
tegwick	c405215a20	chore(consistency): mark USER-WP-0021 finished in work records	2026-08-19 09:53:26 +02:00
custodian-sync	f322571d6c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-19: - update .custodian-brief.md for user-engine	2026-08-19 09:51:39 +02:00
tegwick	f762161d84	Adapt USER-WP-0021 and USER-WP-0023 to published policy-nexus contracts ... IAM Profile v0.3 and Tenancy Posture v0.1 are now live on policy.coulomb.social. Close the portal expansion workplan against those documents, keep the flex-auth live A2 probe waiting, and forward optional tenant_roles to flex-auth without authorizing from them locally.	2026-08-19 09:51:08 +02:00
custodian-sync	166788228d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-18: - update .custodian-brief.md for user-engine	2026-08-18 12:53:47 +02:00