4 Commits

Author	SHA1	Message	Date
tegwick	90007c2cda	feat: close WP-0009/WP-0013 production integration stewardship strand ... Ship flex-auth policy gate registry and smoke evidence, archive WP-0009 through WP-0013, and add integration docs: ops-bridge cert_command migration playbook, operator OpenBao token hygiene, principals drift check script, and 2026-06-24 INTENT/SCOPE gap analysis.	2026-06-24 12:44:32 +02:00
tegwick	8e9383a33a	feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) ... Add policy.py client that calls flex-auth /v1/check before sign/issue when policy.enabled is true. Record policy_decision_id in signatures.log. Default off preserves existing inventory-only behavior. Document production OpenBao health probe and update config/wiki references.	2026-06-17 08:37:14 +02:00
tegwick	15bf8cb543	WARDEN-WP-0005: OpenBao-first documentation alignment ... Document OpenBao as the platform production secrets service while keeping the vault-compatible warden.yaml config shape. Update OpsWardenConfig, SCOPE, and CertCommandInterface cross-references.	2026-06-17 07:36:13 +02:00
Bernd Worsch	5ae6b988aa	Initial Commit	2026-03-28 00:45:43 +00:00