tegwick 534906d509 docs(workplan): update NK-WP-0001 with resolved decisions D1/D2/D3 ...

- Add Decisions table summarising D1 (KeePassXC→Vault), D2 (Keycloak-internal
  hybrid + file-based bootstrap), D3 (plain Helm, AI-first philosophy)
- Split T01 into Phase 0a (pre-cluster KeePassXC) and Phase 0b (in-cluster
  Vault transition) per D1
- Update T05 to explicitly reference D3 (plain Helm first)
- Update T06 to state the D2 identity decision rather than re-opening it
- Update T07: remove "decide" language, implement decided approach, add
  D2 bootstrap user management scope note
- Update T08: add Vault unseal key backup to the backup list
- Replace Open Questions with remaining unresolved items (5 items)
- Add DECISIONS.md (decision log auto-generated by State Hub)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-01 22:51:11 +01:00

..

NK-WP-0001-sso-mfa-platform.md

docs(workplan): update NK-WP-0001 with resolved decisions D1/D2/D3

2026-03-01 22:51:11 +01:00