Go to file

tegwick 85a781b7a4 NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

T2: greenfield live proof against a fresh uninitialized OpenBao 2.5.5 —
caught and fixed 'bao operator unseal -' not reading stdin (now
'bao write sys/unseal key=-'); init and reseal-replay paths proven.
T3: attended-ceremony selectable — runbook, non-secret ceremony-record
template + validator, and a lab/production deployment profile that blocks
sops-held-automation in console selection, gates, and the init script.
T4: console gate + evidence flags for auto-unseal-transit (Helm seal stanza
prepared in railiance-platform).
Also: SCOPE.md refreshed to current repo state; adhoc fix for the broken
check-secrets Make target (unescaped $).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-02 22:08:33 +02:00

.claude

Regenerate agent instructions: workstream -> workplan terminology

2026-07-02 01:47:46 +02:00

.githooks

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

canon

docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it.

2026-06-03 10:33:31 +02:00

docs

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

examples

Add signed custody roster workflow

2026-06-02 01:11:42 +02:00

history

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

keys

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

local-identity

Local Identity OICD bootstrap

2026-05-02 16:58:44 +02:00

registry

Add capability registry scaffold (REUSE-WP-0014-T06 B04)

2026-06-16 01:55:44 +02:00

sso-mfa

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

tools

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

wiki

Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan

2026-02-28 17:21:51 +01:00

workplans

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

.custodian-brief.md

chore(consistency): sync task status from DB [auto]

2026-07-02 11:02:40 +02:00

.gitignore

Close OpenBao OIDC admin bootstrap path

2026-06-01 21:20:53 +02:00

.repo-classification.yaml

Human-review .repo-classification.yaml (CUST-WP-0050 follow-up)

2026-06-22 17:56:17 +02:00

.sops.yaml

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

AGENTS.md

Regenerate agent instructions: workstream -> workplan terminology

2026-07-02 01:47:46 +02:00

CLAUDE.md

Add credential routing instructions for all agent runtimes

2026-06-18 22:48:38 +02:00

CONFIG.md

feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05)

2026-03-19 08:31:51 +00:00

DECISIONS.md

Decision for KeyCape Implementation Language Go

2026-03-26 09:21:17 +01:00

INTENT.md

Add meta-orchestration layer to ADR-0007; deepen NetKingdom INTENT

2026-05-21 01:00:39 +02:00

LICENSE

Initial commit

2026-02-28 09:41:41 +00:00

Makefile

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

README.md

Repo hygiene: fill stack-and-commands, normalize workplan statuses

2026-07-02 00:21:49 +02:00

SCOPE.md

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

README.md

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.

Security Infrastructure Documents

secrets-engine security infrastructure boundary defines how secrets-engine participates in the NetKingdom security infrastructure and how it interacts with OpenBao, flex-auth, user-engine, ops-warden, ops-bridge, info-tech-canon, State Hub, and agents.