net-kingdom

Files

tegwick 7b211acd57 Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008

Refine the recursive platform security architecture to make OpenBao the
canonical runtime secret authority, with SOPS/age, K8s Secrets, and the
emergency bundle reframed as bootstrap/delivery/break-glass mechanisms.

- credential-management standard v0.2: add OpenBao runtime authority
  section, rotation rules, and prohibited patterns (OpenBao-as-PDP,
  tenant platform-root)
- platform-identity-security-architecture: mark implemented; add
  flex-auth/Topaz implications, Coulomb onboarding path, and a
  production-readiness checklist
- NK-WP-0004/0005: document bootstrap-to-OpenBao handoff boundary
- NK-WP-0006/0007: status -> done with implementation reviews; add
  recursive platform/tenant split and OpenBao broker/audit role for
  object-storage STS vending
- NK-WP-0008: status -> done; repoint corpus to infospace-bench
- new ADR-0007 (orchestration boundary), ADR-0008 (STS vending
  boundary), and the object-storage STS credential-vending architecture

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-20 22:51:20 +02:00

NK-WP-0001-sso-mfa-platform.md

chore(workplans): revise workplans post NK-WP-0005

2026-03-21 08:47:44 +00:00

NK-WP-0002-local-identity.md

feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03)

2026-03-05 09:22:13 +01:00

NK-WP-0003-keycape-privacyidea-cluster-deployment.md

Net Kingdom cluster deployment finished

2026-05-02 17:28:44 +02:00

NK-WP-0004-credential-management-foundation.md

Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008