tegwick f625dd0681 feat: OpenBao unseal custody models — automation-first with blocked alternatives ...

Document three init/unseal custody paths; default sops-held-automation for
fast rebuild cycles. Security bootstrap console lists models, blocks planned
attended-ceremony and auto-unseal-transit with hints, and gates init ceremony
on implemented selection. NET-WP-0020 tracks downstream SSH automation.

2026-06-18 00:51:48 +02:00

234 KiB

Executable File

Raw Blame History

View Raw