tegwick 42ca370085 feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing ...

- LocalCA: ssh-keygen -s signing, keypair generation, cert parsing via ssh-keygen -L
- VaultCA: Vault SSH engine backend via httpx
- Inventory: YAML actor registry with ActorType, principals, TTL policy
- Scorecard: four cert-side compliance checks (prefixes, principals, no expired/stale)
- CLI: sign (cert_command interface), issue, status, scorecard, inventory subcommands
- ops-ssh-wrapper: acquire cert and exec SSH command
- Fix: principal parser stops at section headers containing ':' (Critical Options, Extensions)
- Move WARDEN-WP-0001 workplan from ops-bridge; register repo in state-hub (74df727e)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-15 13:27:49 +02:00

..

__init__.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_ca.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_config.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_inventory.py

feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing

2026-05-15 13:27:49 +02:00

test_models.py

Initial Commit

2026-03-28 00:45:43 +00:00

test_scorecard.py

feat(bootstrap): WARDEN-WP-0001 initial implementation — 42 tests passing

2026-05-15 13:27:49 +02:00