tegwick 8db000e5f0 feat(workplan): NK-WP-0005 — agent-driven credential bootstrap ...

Replaces the human-as-operator model from NK-WP-0004 with full agent
automation. Agent generates, encrypts (SOPS), injects into cluster,
and delivers a single emergency bundle (age key + break-glass passwords).
Human only stores that bundle in their personal password manager.

KeePassXC removed from operational path. creds-state.yaml redesigned
with agent_mode and emergency_bundle_delivered gate. Standard to be
updated to v0.2 (T07).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-21 09:25:36 +01:00

..

NK-WP-0001-sso-mfa-platform.md

feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04)

2026-03-19 01:22:41 +00:00

NK-WP-0002-local-identity.md

feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03)

2026-03-05 09:22:13 +01:00

NK-WP-0003-keycape-privacyidea-cluster-deployment.md

fix(sso-mfa): NK-WP-0003-T04 — correct privacyIDEA image and port

2026-03-20 23:54:18 +00:00

NK-WP-0004-credential-management-foundation.md

chore(consistency): NK-WP-0004 complete — correct regressed task statuses

2026-03-21 09:19:37 +01:00

NK-WP-0005-agent-driven-credential-bootstrap.md

feat(workplan): NK-WP-0005 — agent-driven credential bootstrap

2026-03-21 09:25:36 +01:00