Commit Graph

62 Commits

Author SHA1 Message Date
5b5e8616bf RAILIANCE-WP-0005 finished: T07 re-scoped and closed
Helper-side preflight scope is complete and unit-tested; the live flex-auth
deny capability is re-scoped to flex-auth-side work (capability request
893ff109). Autonomous decision, documented in the task note for easy revert.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 20:56:57 +02:00
4936b8970b RAILIANCE-WP-0009/0010 finished: front doors active; WP-0005 T10 done
- CCR-2026-0002/0003: frontdoor_activation evidence recorded, status active,
  readiness ready/resolvable (ops-warden catalog promotion commit 364eb7d)
- WP-0009/0010 T06 done; both workplans finished
- WP-0005 T10 closed on acceptance (fast path, break-glass, routing truth
  consistent); phase-2 readonly-diagnostics grant deferred as follow-up
- WP-0005 T07 stays wait: flex-auth lacks a credential-grant authorization
  surface (capability request sent, State Hub message 893ff109)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 20:54:29 +02:00
38c6b11103 RAILIANCE-WP-0009/0010 T07: credential lane lifecycle runbook
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 14:52:08 +02:00
1a075cafd1 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-07-02:
  - RAILIANCE-WP-0010-T06: progress → wait
2026-07-02 12:56:59 +02:00
b86001fe2b RAILIANCE-WP-0010: T04/T05 done — value provisioned, ES lane live, llm-connect verified
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:56:43 +02:00
b26a04cab3 RAILIANCE-WP-0005-T09 done: audit references + unwrap-once evidence
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:13:38 +02:00
8327ce9fe3 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-07-02:
  - RAILIANCE-WP-0009-T06: progress → wait
2026-07-02 12:13:07 +02:00
ddd916d71c CCR-2026-0002/0003 approved + applied via constrained applier; WP-0008 finished, WP-0009/0010 advanced
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:12:49 +02:00
60814fc76a Archive closed workplans to workplans/archived/ (ADR-001)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 00:25:41 +02:00
ab08a21337 Align OpenRouter lane selector 2026-07-01 23:51:25 +02:00
797a957e42 Record credential broker delivery proof 2026-07-01 23:42:17 +02:00
38936d8fd6 Close delegated prod applier pilot 2026-07-01 23:34:13 +02:00
268437a36d chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T10: progress → wait
2026-07-01 23:12:47 +02:00
0a24ab8475 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T09: progress → wait
2026-07-01 23:12:47 +02:00
6ed18ca709 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-07-01:
  - RAILIANCE-WP-0005-T05: progress → wait
2026-07-01 23:12:47 +02:00
8321e14b46 Unblock credential broker warden-sign pilot 2026-07-01 23:10:38 +02:00
a95236d2e5 Add credential-change delegated applier flow 2026-07-01 20:07:26 +02:00
5c6a3ce95e chore(consistency): renormalize lifecycle state [auto]
Updated by fix-consistency on 2026-06-29:
  - workplan status: ready → active
2026-06-29 17:36:01 +02:00
a07f2d3d7f chore(consistency): renormalize lifecycle state [auto]
Updated by fix-consistency on 2026-06-29:
  - workplan status: ready → active
2026-06-29 17:35:59 +02:00
8f617fcbf4 Activate whynot npm credential lane 2026-06-29 00:13:09 +02:00
3527bc1cae Request groups scope for whynot OIDC role 2026-06-28 13:23:14 +02:00
271aa94642 Record whynot OpenBao lane apply evidence 2026-06-28 12:41:39 +02:00
e3147b7fd5 Prepare whynot npm token handoff 2026-06-28 01:43:06 +02:00
00fb93544c Add CCR decision template task 2026-06-28 01:17:41 +02:00
eb24e04b71 Correct whynot credential tenant path 2026-06-28 01:00:12 +02:00
82d15cfea2 chore(consistency): renormalize lifecycle state [auto]
Updated by fix-consistency on 2026-06-28:
  - workplan status: proposed → active
2026-06-28 00:45:12 +02:00
0e3ea30c75 Propose OpenBao automation delegation 2026-06-28 00:44:23 +02:00
f92d07d5a1 Record whynot CCR apply blocker 2026-06-28 00:24:23 +02:00
3706ff703e Link CCR approval to State Hub decision 2026-06-28 00:00:02 +02:00
52687d8b3e Confirm whynot credential binding 2026-06-27 23:45:31 +02:00
aee0dcefad Add credential lane readiness proposals 2026-06-27 23:30:29 +02:00
815b124ab1 Implement credential change request review flow 2026-06-27 22:57:21 +02:00
85a4278a55 Add credential approval workflow plan 2026-06-27 22:48:24 +02:00
673ec46e25 feat: complete credential broker source flow 2026-06-27 00:29:53 +02:00
752cfd6f00 feat: add credential broker token helper 2026-06-27 00:06:03 +02:00
c7393d94ab feat: add credential grant catalog foundation 2026-06-26 17:49:40 +02:00
693dc71833 Add ESO OpenBao GitOps add-ons 2026-06-25 20:08:36 +02:00
0f0b14001e chore: finalize ArgoCD workplan and add credential broker plan 2026-06-25 17:49:35 +02:00
8e6892f4bf Normalize agent instructions and workplan frontmatter (STATE-WP-0067)
- Align agent files with on-disk workplan prefixes (infer from workplan ids)
- Set workplan domain to registered domain_slug; add topic_slug where applicable
- Repair frontmatter delimiter formatting; migrate legacy task status literals
- Regenerate AGENTS.md, CLAUDE.md, and .claude/rules from State Hub templates
2026-06-22 23:16:28 +02:00
ae4d967481 Mark ArgoCD bootstrap T05 done after live cluster apply
Record bootstrap evidence on 92.205.130.254 and note issue-core sync is
blocked until the ExternalSecret CRD is installed.
2026-06-19 21:09:36 +02:00
64d7c18c3f Add ArgoCD GitOps bootstrap contract for railiance01
Define platform-owned AppProjects, root app-of-apps, repository registration
templates, and tenant onboarding docs so issue-core can deploy via ArgoCD.
Ignore encrypted repository secrets locally and cross-link OpenBao delivery
guidance with the new GitOps contract.
2026-06-19 21:05:12 +02:00
18c1b86498 Reject placeholder OpenBao drill evidence 2026-06-02 02:02:09 +02:00
606a5f3e1e Add OpenBao emergency drill evidence validator 2026-06-02 00:08:17 +02:00
123b9aafce Add OpenBao restore evidence validator 2026-06-01 23:57:00 +02:00
c0d4ec9037 Document audit-core mock sink handoff 2026-06-01 23:44:06 +02:00
c0c6ead5dd Record OpenBao authenticated verifier proof 2026-06-01 22:52:42 +02:00
5e4040d43d Add OpenBao authenticated readiness verifier 2026-06-01 22:46:14 +02:00
f1336d5bcc Record OpenBao audit rollout evidence 2026-06-01 22:30:35 +02:00
087bb91b86 Configure OpenBao file audit declaratively 2026-06-01 22:12:23 +02:00
5840783e44 Close Railiance OpenBao workplan 2026-05-29 02:11:01 +02:00