2 Commits

Author	SHA1	Message	Date
tegwick	f625dd0681	feat: OpenBao unseal custody models — automation-first with blocked alternatives ... Document three init/unseal custody paths; default sops-held-automation for fast rebuild cycles. Security bootstrap console lists models, blocks planned attended-ceremony and auto-unseal-transit with hints, and gates init ceremony on implemented selection. NET-WP-0020 tracks downstream SSH automation.	2026-06-18 00:51:48 +02:00
tegwick	e20b322a2e	feat(NET-WP-0018-T07): add automated tests for bootstrap UI sections and runbooks ... - Created tools/security-bootstrap-console/tests/test_security_bootstrap_console.py (pytest-based, 8 tests covering templates (incl. 0019 dry-run fields), runbook_payloads (T06 entry), audit_core_posture, etc. per layered spec + 0019 note) - Makefile: added security-bootstrap-console-test (pytest), security-bootstrap-scripts-syntax (bash -n for key sh scripts like dry-run-nonroot-user.sh); integrated into .PHONY and bootstrap lists - Updated workplan T07 status done + detailed note with pragmatic refs - Tests pass (python -m pytest) - Commit + will sync/fix/progress - Covers console UI, validators, 0019 polish artifacts (orchestrator, cmds, claims, evidence) as required for T07 T07 complete. 6/9 now.	2026-06-03 17:28:21 +02:00