3 Commits

Author	SHA1	Message	Date
tegwick	8e9383a33a	feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) ... Add policy.py client that calls flex-auth /v1/check before sign/issue when policy.enabled is true. Record policy_decision_id in signatures.log. Default off preserves existing inventory-only behavior. Document production OpenBao health probe and update config/wiki references.	2026-06-17 08:37:14 +02:00
tegwick	1865e0744e	WARDEN-WP-0006: NetKingdom stewardship docs and alignment ... Add credential routing, actor patterns, security map, OpenBao SSH checklist, and policy-gated signing design. Update registry and SCOPE; record INTENT↔SCOPE reassessment (C3 completeness).	2026-06-17 08:22:45 +02:00
tegwick	ca1eaf3350	Define INTENT, refresh SCOPE, and plan NetKingdom stewardship ... Add ops-warden INTENT as operational access steward for NetKingdom security (route credential lanes, align docs, issue SSH certs only). Refresh SCOPE for stewardship scope, persist INTENT↔SCOPE gap assessment, and open WARDEN-WP-0006 for routing runbooks and platform alignment.	2026-06-17 08:20:32 +02:00