secrets

Drop the machine-coverage check; the framework runs it now

#49 by allod-agent was merged 2026-10-22 00:41:47 +01:00

master

1 approval

Check that inventory guests, host keys and identities name one set of machines

1

#48 by allod-agent was merged 2026-10-21 23:07:19 +01:00

master

1 approval

Derive declared credentials' recipients from the rotation registry

1

#47 by allod-agent was merged 2026-10-18 23:48:52 +01:00

master

1 approval

Move the check suite and the registry validators out of flake.nix

1

#38 by allod-agent was merged 2026-09-22 03:34:24 +01:00

master

1 approval

Export lib.mkLocalAuthRefreshSources beside its applied result

1

#36 by allod-agent was merged 2026-09-20 17:08:31 +01:00

master

1 approval

Project a dev VM's own external SSH aliases onto devIdentities

1

#34 by allod-agent was merged 2026-09-20 14:49:07 +01:00

master

1 approval

Template sshHosts entries carry localForwards and extraOptions

1

#33 by allod-agent was merged 2026-09-20 04:23:48 +01:00

master

1 approval

Remove the deprecated lib.forgejoTokenGroups alias

1

#32 by allod-agent was merged 2026-09-19 23:00:29 +01:00

master

1 approval

Rename the rotation registry to rotation-registry.json and lib.rotationRegistry

2

#31 by allod-agent was merged 2026-09-19 22:41:20 +01:00

master

1 approval

Export one credential-store URL predicate and its vector table

1

#30 by allod-agent was merged 2026-09-19 22:12:15 +01:00

master

1 approval

credential-registry: accept the value-template shape only

1

#28 by allod-agent was merged 2026-09-13 02:44:12 +01:00

master

1 approval

Credential registry: value templates and verify commands replace the format and probe enums

1

#24 by allod-agent was merged 2026-09-12 02:23:45 +01:00

master

1 approval

credential-inventory: run the rules over sabotage fixtures too

1

#21 by allod-agent was merged 2026-09-11 02:44:41 +01:00

master

1 approval

credential-inventory: add the pending rotation state

1

#19 by allod-agent was merged 2026-09-11 01:52:54 +01:00

master

1 approval

Carry the host user's credential files in nexusIdentity

1

#18 by allod-agent was merged 2026-09-10 16:43:21 +01:00

master

1 approval

Separate hypervisor Pi recipients from VM keys

1

#15 by allod-agent was merged 2026-08-24 14:30:47 +01:00

master

1 approval

Store named Pi credential tokens with per-token ciphertexts

2

#14 by allod-agent was merged 2026-08-24 02:42:27 +01:00

master

1 approval

Add the Pi credential registry contract

3

#13 by allod-agent was merged 2026-08-22 04:16:14 +01:00

master

1 approval

Null agentTokenFile with forgeTokenFile under the Forge opt-out

1

#11 by allod-agent was merged 2026-07-31 00:57:44 +01:00

master

1 approval

Let a dev machine opt out of Forge access

1

#10 by allod-agent was merged 2026-07-30 22:49:03 +01:00

master

1 approval