3 Commits

Author	SHA1	Message	Date
tegwick	f625dd0681	feat: OpenBao unseal custody models — automation-first with blocked alternatives ... Document three init/unseal custody paths; default sops-held-automation for fast rebuild cycles. Security bootstrap console lists models, blocks planned attended-ceremony and auto-unseal-transit with hints, and gates init ceremony on implemented selection. NET-WP-0020 tracks downstream SSH automation.	2026-06-18 00:51:48 +02:00
tegwick	4a99f8245d	NET-WP-0018 T09: cross-ref completion in smooth-bootstrap-guide.md Step 8 (now points to new risk/rehearsal doc)	2026-06-04 00:52:01 +02:00
tegwick	7da19ef767	feat(NET-WP-0018-T05): complete smooth bootstrap guide ... - Created docs/smooth-bootstrap-guide.md as the single consolidated operator guide per T05 spec + T03 recs: - Full sequence (prereqs, creds/king, privacyIDEA, LLDAP/user + MFA, KeyCape, OpenBao, lifecycle via 0019, reopen, handoff) - Per-step evidence requirements + links to validate-*, 0019 dry-run, console subcmds/make - Blocked conditions, next safe action, effective preview, actor classes - References T02 runtime arch, T03 retrospective/matrix, console lifecycle-guide (incl. 0019), UX contracts, evidence templates - Pragmatic note + update pointers for console guide - Updated workplan T05 to done + completion note - Pragmatic: progress (task_id), file notes, this commit - Brief/fix next (expect 4/9 done: T02-T03 + T05; T04 medium can follow or parallel) T05 complete. T06 (align control surface) next logical (uses this guide + T02/T03).	2026-06-03 16:56:10 +02:00