tegwick 85a781b7a4 NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof ...

T2: greenfield live proof against a fresh uninitialized OpenBao 2.5.5 —
caught and fixed 'bao operator unseal -' not reading stdin (now
'bao write sys/unseal key=-'); init and reseal-replay paths proven.
T3: attended-ceremony selectable — runbook, non-secret ceremony-record
template + validator, and a lab/production deployment profile that blocks
sops-held-automation in console selection, gates, and the init script.
T4: console gate + evidence flags for auto-unseal-transit (Helm seal stanza
prepared in railiance-platform).
Also: SCOPE.md refreshed to current repo state; adhoc fix for the broken
check-secrets Make target (unescaped $).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-02 22:08:33 +02:00

..

adr

Implement NK-WP-0013 playbook capability contract

2026-05-22 14:49:25 +02:00

reviews

Split user-engine implementation planning

2026-05-22 19:50:12 +02:00

LocalIdentity.md

Local Identity OICD bootstrap

2026-05-02 16:58:44 +02:00

NetkingdomRuntimeArchitecture.md

feat(keycape): add netkingdom OIDC mount and bao.coulomb.social callbacks

2026-06-18 01:23:02 +02:00

object-storage-sts-credential-vending.md

Implement NK-WP-0012 IAM profile specification

2026-05-22 14:35:31 +02:00

openbao-attended-ceremony-runbook.md

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

openbao-unseal-custody-models.md

NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof

2026-07-02 22:08:33 +02:00

platform-identity-security-architecture.md

docs: recognize ops-warden operational SSH credential lane

2026-06-17 08:22:45 +02:00

platform-root-custody.md

Guide OpenBao custody ceremony order

2026-05-25 02:02:14 +02:00

princedom-isolation-exploration.md

Exploring multi tenancy

2026-05-25 21:47:40 +02:00

responsibility-map.md

Repo hygiene: fill stack-and-commands, normalize workplan statuses

2026-07-02 00:21:49 +02:00

secrets-engine-security-infrastructure-boundary.md

Repo hygiene: fill stack-and-commands, normalize workplan statuses

2026-07-02 00:21:49 +02:00

security-bootstrap-age-custody.md

Clarifications on sops

2026-06-14 19:51:05 +02:00

security-bootstrap-handover-cleanup.md

openbao king credential bootstrapping

2026-05-24 09:26:02 +02:00

security-bootstrap-king-credential-kit.md

bootstrapping guidance ui and missing stuff

2026-05-24 17:04:15 +02:00

security-bootstrap-openbao-ceremony-ux.md

Guide OpenBao custody ceremony order

2026-05-25 02:02:14 +02:00

security-bootstrap-operator-journey.md

openbao king credential bootstrapping

2026-05-24 09:26:02 +02:00

security-bootstrap-rebuild-risk-and-rehearsal.md

NET-WP-0018 T09: Assess scratch-rebuild risk and define rehearsal plan

2026-06-04 00:50:18 +02:00

security-bootstrap-related-workplan-review.md

openbao king credential bootstrapping

2026-05-24 09:26:02 +02:00

security-bootstrap-retrospective.md

feat(NET-WP-0018-T03): initial retrospective + gap matrix (substantial draft)

2026-06-03 16:31:08 +02:00

security-bootstrap-use-cases.md

openbao king credential bootstrapping

2026-05-24 09:26:02 +02:00

security-bootstrap-user-lifecycle.md

openbao king credential bootstrapping

2026-05-24 09:26:02 +02:00

smooth-bootstrap-guide.md

feat: OpenBao unseal custody models — automation-first with blocked alternatives

2026-06-18 00:51:48 +02:00

user-engine-interface-guidance.md

docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it.

2026-06-03 10:33:31 +02:00

user-engine-netkingdom-integration-assessment.md

docs: persist user-engine vs net-kingdom integration assessment (new doc + cross-references in SCOPE, boundary contract, guidance, responsibility map, 0018/0019 workplans). Also updated user-engine integration doc to reference it.

2026-06-03 10:33:31 +02:00