secrets

Derive declared credentials' recipients from the rotation registry so declare writes no secrets.nix line

handoff

1

#46 by allod-agent was closed 2026-10-19 05:14:45 +01:00

Identity and host-key slot for the template's bitcoin-node

2

#45 by vnprc-agent was closed 2026-10-21 23:32:37 +01:00

Identity carries the forge web address (forgeUrl), defaulted to https on the forge host

2

#44 by vnprc-agent was closed 2026-10-21 22:37:16 +01:00

Host keys and identities are not checked against the inventory machine list

#43 by vnprc-agent was closed 2026-10-21 23:07:19 +01:00

The forge machine's identity and host key

1

#42 by vnprc-agent was closed 2026-10-09 05:14:12 +01:00

serviceVMs identities: root is the only account on a service VM

1

#41 by vnprc-agent was closed 2026-10-07 16:00:52 +01:00

Derive the agent token and forge key entries so a forge-less fork carries no placeholder

1

#40 by vnprc-agent was closed 2026-10-21 23:32:45 +01:00

hypervisor-recipient-coverage skips a guest whose host-key secret has no rule, and its host-key half has no negative fixture

1

#39 by vnprc-agent was closed 2026-09-30 04:30:22 +01:00

Move the check suite and the registry validators out of flake.nix

#37 by allod-agent was closed 2026-09-22 03:34:24 +01:00

Export the local_auth_refresh projection as a function of a registry

#35 by allod-agent was closed 2026-09-20 17:08:32 +01:00

One credential-store URL predicate: stop hand-synchronising five spellings of one grammar

4

#29 by allod-agent was closed 2026-09-20 16:32:36 +01:00

Remove legacy credential-shape acceptance once every registry is on value templates

#27 by vnprc-agent was closed 2026-09-13 02:51:31 +01:00

Remove legacy credential-format compatibility after migration

2

#26 by allod-agent was closed 2026-09-18 22:27:52 +01:00

Handoff: migrate the private credential registry to value templates

handoff

1

#25 by allod-agent was closed 2026-09-12 18:34:44 +01:00

Credential value templates: one declared shape for every credential's non-secret half and verification

1

#23 by allod-agent was closed 2026-09-12 02:24:16 +01:00

Rename the rotation registry: forgejo-token-groups.json and lib.forgejoTokenGroups no longer say what they hold

2

#22 by vnprc-agent was closed 2026-09-19 23:00:29 +01:00

credential-inventory: sabotage fixture for the pending and active file rules

#20 by allod-agent was closed 2026-09-11 02:44:42 +01:00

Carry the host user's credential files in nexusIdentity

#17 by vnprc-agent was closed 2026-09-10 16:43:22 +01:00

Let one provider carry a per-target credential

#16 by vnprc-agent was closed 2026-10-21 22:53:01 +01:00

Make the Forge token registry follow the forgeAccess flag

decision

1

#12 by allod-agent was closed 2026-10-22 01:35:28 +01:00