|
|
|
.. |
|
|
|
|
D-057-DECIDED-append.md
|
Provider VIP carve updates
|
14 days ago
|
|
|
D-057-REVIEW-ITEMS.md
|
Phase 0 updates
|
14 days ago
|
|
|
D-058-renumber.md
|
Provider VIP carve updates
|
14 days ago
|
|
|
D-068-openbao-assessment-DRAFT.md
|
addendum 26: DOCFIX-094 stderr-separation fixes (cloud-assert fail-open closed) + vault snap-track measurements + juju auth-expiry blocker
|
7 days ago
|
|
|
D-068-vault-1.8-vs-1.16-analysis.md
|
Create D-068-vault-1.8-vs-1.16-analysis.md
|
8 days ago
|
|
|
DOCFIX-064-phase08-changelist.md
|
Phase 8 updates
|
11 days ago
|
|
|
README-D057-PACK.md
|
Create README-D057-PACK.md
|
14 days ago
|
|
|
as-executed-log-convention.md
|
addendum 27: d011-batch3 window EXECUTED -- D-073 APPLIED, foil1 onboarded, d011-04/05 PASS, D-011 closed-except-item-6; DOCFIX-095/096/097
|
7 days ago
|
|
|
changelog-20260703-process-hardening.md
|
Test patches
|
10 days ago
|
|
|
changelog-20260709-adversarial-review-fixes.md
|
DOCFIX-160: adversarial review pass finds and fixes 3 real issues
|
3 days ago
|
|
|
changelog-20260709-ceph-replication-tooling.md
|
DOCFIX-165: Ceph replication tooling scripts, radosgw multisite + rbd-mirror (gap #5)
|
3 days ago
|
|
|
changelog-20260709-dc-dc-design.md
|
design docs upload
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase0-runbook.md
|
DOCFIX-153: Stage 1 runbook -- Phase 0 vcloud host preparation
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase1-runbook.md
|
DOCFIX-154/155/156: Stage 2/3/5 runbooks -- Office1 standup, DC substrate, per-DC bundle
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase2-runbook.md
|
DOCFIX-154/155/156: Stage 2/3/5 runbooks -- Office1 standup, DC substrate, per-DC bundle
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase3-runbook.md
|
DOCFIX-157/158/159: Stage 4/6/7 runbooks -- MAAS deploy, DR drill, Designate/COS/Magnum
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase4-runbook.md
|
DOCFIX-154/155/156: Stage 2/3/5 runbooks -- Office1 standup, DC substrate, per-DC bundle
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase5-runbook.md
|
DOCFIX-157/158/159: Stage 4/6/7 runbooks -- MAAS deploy, DR drill, Designate/COS/Magnum
|
4 days ago
|
|
|
changelog-20260709-dc-dc-phase6-runbook.md
|
DOCFIX-157/158/159: Stage 4/6/7 runbooks -- MAAS deploy, DR drill, Designate/COS/Magnum
|
4 days ago
|
|
|
changelog-20260709-dc-dc-repo-rename-sweep.md
|
DOCFIX-139..141: repo-rename sweep (ipv4->dc-dc) + repo-lint L9 self-reference guard
|
4 days ago
|
|
|
changelog-20260709-dc-selector-convention.md
|
DOCFIX-151: $DC selector convention for lib-net.sh/lib-hosts.sh (gap #1 closed)
|
4 days ago
|
|
|
changelog-20260709-designate-cinderbackup-rbdmirror.md
|
DOCFIX-167: bundle.yaml -- Designate reactivation + D-108 DR mechanism (gaps #6+14)
|
3 days ago
|
|
|
changelog-20260709-final-consolidation.md
|
DOCFIX-161: final consolidation pass -- one more gap found, stale refs fixed
|
3 days ago
|
|
|
changelog-20260709-ipv6-family-matrix-overlay.md
|
DOCFIX-164: D-101 IPv6 family-matrix overlay, researched against real charm source (gap #13)
|
3 days ago
|
|
|
changelog-20260709-maas-scripts-dc-param.md
|
DOCFIX-166: $DC parameterization for reenroll-hosts/carve-host-interfaces/phase-00-maas-standup (gap #15, CLI half)
|
3 days ago
|
|
|
changelog-20260709-mtu-ceph-budget-calculators.md
|
DOCFIX-162: MTU/geneve + Ceph disk-budget calculator scripts (gap #7)
|
3 days ago
|
|
|
changelog-20260709-netbox-dc-dc-pipeline.md
|
DOCFIX-152: NetBox multi-DC/dual-stack import pipeline (gap #3 mechanism)
|
4 days ago
|
|
|
changelog-20260709-netem-ula-gua-proposal.md
|
DOCFIX-168: proposed netem parameters + ULA/GUA generation guidance (gaps #4(d)+11); tracker sync
|
3 days ago
|
|
|
changelog-20260709-office1-network-edge.md
|
DOCFIX-163: Office1-local network module + OPNsense edge ownership (gaps #12+16)
|
3 days ago
|
|
|
changelog-20260709-opentofu-audit.md
|
DOCFIX-148: OpenTofu module audit pass + provider-docs skill reference
|
4 days ago
|
|
|
changelog-20260709-opentofu-cloudinit-vm.md
|
DOCFIX-145 + OPNsense deployment research
|
4 days ago
|
|
|
changelog-20260709-opentofu-maas-netem.md
|
DOCFIX-147: opentofu/modules/maas-vm-host + modules/netem-link
|
4 days ago
|
|
|
changelog-20260709-opentofu-node-vm.md
|
DOCFIX-144: opentofu/modules/node-vm + fix real syntax bug in DOCFIX-142
|
4 days ago
|
|
|
changelog-20260709-opentofu-scaffold.md
|
DOCFIX-142: opentofu/ network + storage-pool scaffold (VR1 IaC, gap #2)
|
4 days ago
|
|
|
changelog-20260709-opnsense-config-design.md
|
DOCFIX-149: OPNsense config.xml template + tested renderer
|
4 days ago
|
|
|
changelog-20260709-opnsense-edge-module.md
|
DOCFIX-146: opnsense-edge module + nano-image/config-ISO prep scripts
|
4 days ago
|
|
|
changelog-20260709-opnsense-research.md
|
DOCFIX-145 + OPNsense deployment research
|
4 days ago
|
|
|
changelog-20260709-repo-agnostic-sweep.md
|
DOCFIX-139..141: repo-rename sweep (ipv4->dc-dc) + repo-lint L9 self-reference guard
|
4 days ago
|
|
|
changelog-20260709-repo-lint-crlf-fix.md
|
DOCFIX-143: repo_lint.py no longer relies on git to clean up its own CRLF
|
4 days ago
|
|
|
changelog-20260709-stage0-ratification.md
|
DOCFIX-150: Stage 0 ratification -- D-100..D-110 ADOPTED
|
4 days ago
|
|
|
changelog-20260710-carve-gua-hang-fix.md
|
DOCFIX-181: fix carve_gua subnet-enumeration hang (gauntlet was stalling)
|
3 days ago
|
|
|
changelog-20260710-ledger-scan-self-inflicted-falsepositive-fix.md
|
DOCFIX-175/176: OpenTofu state file security + VR1 teardown/rollback runbook
|
3 days ago
|
|
|
changelog-20260710-netbox-roles-aggregates.md
|
netbox uploads
|
3 days ago
|
|
|
changelog-20260710-opentofu-scaffold-first-validation.md
|
DC-DC Stage 1 (dc-dc-phase0): first real execution + scaffold/tooling fixes
|
3 days ago
|
|
|
changelog-20260710-opentofu-state-file-security.md
|
DOCFIX-175/176: OpenTofu state file security + VR1 teardown/rollback runbook
|
3 days ago
|
|
|
changelog-20260710-phase0-runbook-as-executed.md
|
DC-DC Stage 1 (dc-dc-phase0): first real execution + scaffold/tooling fixes
|
3 days ago
|
|
|
changelog-20260710-phase01-bundle-staleness-fix.md
|
DOCFIX-169: fix stale bundle.yaml expectations in phase-01-bundle-deploy.md
|
3 days ago
|
|
|
changelog-20260710-prereq-install-scripts.md
|
DC-DC Stage 1 (dc-dc-phase0): first real execution + scaffold/tooling fixes
|
3 days ago
|
|
|
changelog-20260710-skill-vr1-awareness.md
|
DOCFIX-177: make the skill and runbooks/README.md aware the VR1 DC-DC track exists
|
3 days ago
|
|
|
changelog-20260710-sweep-bundle-fixes.md
|
DOCFIX-172: full-project sweep -- bundle.yaml fixes
|
3 days ago
|
|
|
changelog-20260710-sweep-dcdc-runbook-fixes.md
|
DOCFIX-171: full-project sweep -- DC-DC runbook consistency fixes
|
3 days ago
|
|
|
changelog-20260710-sweep-script-fixes.md
|
DOCFIX-174: fix self-inflicted false positive in ledger-scan.sh next-free scan
|
3 days ago
|
|
|
changelog-20260710-sweep-vr0-runbook-opentofu-fixes.md
|
DOCFIX-170: full-project sweep -- VR0 runbook + OpenTofu doc fixes
|
3 days ago
|
|
|
changelog-20260710-vr1-teardown-rollback-runbook.md
|
DOCFIX-175/176: OpenTofu state file security + VR1 teardown/rollback runbook
|
3 days ago
|
|
|
changelog-20260711-d111-subcarve-nn-alignment.md
|
D-111: align VR1 v6 subcarve to deployed NN mnemonic; fix ULA-gen doc bug
|
3 days ago
|
|
|
changelog-20260711-ula-gen-command-fix.md
|
D-111: align VR1 v6 subcarve to deployed NN mnemonic; fix ULA-gen doc bug
|
3 days ago
|
|
|
changelog-20260712-docfix189-max-context-session-audit.md
|
DOCFIX-189: re-audit the max-context session's troubleshooting + docs
|
2 days ago
|
|
|
changelog-20260712-libvirt-acpi-kernel-panic.md
|
DOCFIX-190: second boot bug -- libvirt domains had ACPI disabled (FreeBSD kernel panic)
|
2 days ago
|
|
|
changelog-20260712-libvirt-memory-unit-rootcause.md
|
DOCFIX-188 followup: correct the pass criteria (anchor on virsh dominfo, not the QEMU -m string)
|
2 days ago
|
|
|
changelog-20260712-office1-opnsense-edge-build.md
|
DOCFIX-189: re-audit the max-context session's troubleshooting + docs
|
2 days ago
|
|
|
changelog-20260712-opnsense-edge-boot-fixes.md
|
DOCFIX-189: re-audit the max-context session's troubleshooting + docs
|
2 days ago
|
|
|
changelog-20260712-opnsense-edge-real-isp-router.md
|
Office1 OPNsense edge build: real-ISP-router config + first-boot fixes
|
2 days ago
|
|
|
changelog-20260712-opnsense-prep-bz2-fallback.md
|
Office1 OPNsense edge build: real-ISP-router config + first-boot fixes
|
2 days ago
|
|
|
changelog-20260713-apparmor-libvirt-prereq.md
|
Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
|
16 hours ago
|
|
|
changelog-20260713-config-xml-danger-sweep.md
|
SAFETY SWEEP: mark the config.xml push path as a LIVE HAZARD (no behaviour change)
|
1 day ago
|
|
|
changelog-20260713-config-xml-path-deleted.md
|
APPLIED + CORRECTION: "updated in-place" does NOT mean "no restart" -- the apply bounced the edge
|
1 day ago
|
|
|
changelog-20260713-d114-voffice1-nested-virt.md
|
D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
|
14 hours ago
|
|
|
changelog-20260713-docfix194-opentofu-module-validation.md
|
DOCFIX-194: the OpenTofu gate was GREEN over two BROKEN modules
|
1 day ago
|
|
|
changelog-20260713-git-credential-store.md
|
SEC-005: store a GitBucket credential on the jumphost so pushes stop failing
|
1 day ago
|
|
|
changelog-20260713-office1-dhcp-apply.md
|
DOCFIX-193 APPLIED: the Office1 edge now serves DHCP (kea-dhcp4 on udp/67)
|
1 day ago
|
|
|
changelog-20260713-office1-headend-maas-lxd.md
|
Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
|
14 hours ago
|
|
|
changelog-20260713-office1-netbox-deployed.md
|
office1-netbox DEPLOYED: NetBox 4.6.4 live on the Office1 headend, three levels deep
|
12 hours ago
|
|
|
changelog-20260713-opnsense-api-client.md
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
1 day ago
|
|
|
changelog-20260713-opnsense-api-proven.md
|
D-113(a2) PROVEN: the OPNsense REST API round-trips the edge config
|
1 day ago
|
|
|
changelog-20260713-opnsense-api-write-proven.md
|
D-113(a2) write path PROVEN on the live edge: API -> OPNsense -> Kea -> daemon
|
1 day ago
|
|
|
changelog-20260713-opnsense-apikey-bootstrap.md
|
D-113(a2): API-key bootstrap -- no GUI click, no re-implemented crypto
|
1 day ago
|
|
|
changelog-20260713-workflow-doc-status-correction.md
|
Correct the workflow doc's status: it was materially FALSE and would misdirect work
|
1 day ago
|
|
|
clientdocs-workflow-review-20260708.md
|
clientdocs workflow review + consolidation proposal (PROPOSAL, operator ruling; read-only analysis from tonight's inventory -- de-dup/entry-point/glossary/hole-closing moves M1-M7, options each); as-executed index: ops-decommission session
|
6 days ago
|
|
|
dc-dc-buildout-design.md
|
DOCFIX-150: Stage 0 ratification -- D-100..D-110 ADOPTED
|
4 days ago
|
|
|
dc-dc-deployment-workflow.md
|
D-116 ADOPTED: no Office1-local GitBucket -- keep using git.baldurkeep.com
|
11 hours ago
|
|
|
dc-dc-ipv6-charm-research.md
|
DOCFIX-164: D-101 IPv6 family-matrix overlay, researched against real charm source (gap #13)
|
3 days ago
|
|
|
dc-dc-netbox-buildout-scope.md
|
D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
|
14 hours ago
|
|
|
dc-dc-netem-and-ula-gua-proposal.md
|
D-111: align VR1 v6 subcarve to deployed NN mnemonic; fix ULA-gen doc bug
|
3 days ago
|
|
|
dc-dc-replication-DR-seed.md
|
Create dc-dc-replication-DR-seed.md
|
5 days ago
|
|
|
design-decisions.md
|
D-117 ADOPTED (B, DC-only): fix the off-by-one site binding + make the importer dry-by-default
|
10 hours ago
|
|
|
docfix-draft-20260702.md
|
Patches
|
10 days ago
|
|
|
handoff-20260703-open-items.md
|
Create handoff-20260703-open-items.md
|
10 days ago
|
|
|
handoff-20260705-open-items.md
|
addendum 27: d011-batch3 window EXECUTED -- D-073 APPLIED, foil1 onboarded, d011-04/05 PASS, D-011 closed-except-item-6; DOCFIX-095/096/097
|
7 days ago
|
|
|
incident-20260712-opnsense-edge-boot-triplefault.md
|
DOCFIX-189: re-audit the max-context session's troubleshooting + docs
|
2 days ago
|
|
|
maas-as-built-reference.md
|
MAAS script updates
|
17 days ago
|
|
|
netbox-vip-queue.md
|
Patches
|
10 days ago
|
|
|
phase-00-maas-standup-notes.md
|
MAAS script updates
|
14 days ago
|
|
|
repo-lint-nextfree-bug-FINDING.md
|
addendum 29: D-074 ADOPTED+EXECUTED -- overlap-allowed tenant CIDRs (Phase 0 gates proven live: exact-overlap subnet + Magnum cluster via API-LB), stage-4 guard rewritten with real overlap math (DOCFIX-106), repo_lint L5 numbering print removed (DOCFIX-107), D-016 amended, contract/runbook/intake aligned
|
7 days ago
|
|
|
script-quality-findings-20260707.md
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
7 days ago
|
|
|
security-ledger.md
|
Tailscale: office1-tailscale joined the SELF-HOSTED tailnet as the Office1 subnet router
|
11 hours ago
|
|
|
session-findings-2026-07-02.md
|
Tenant file updates
|
11 days ago
|
|
|
session-ledger.md
|
D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
|
9 hours ago
|
|
|
tenant-cidr-overlap-correction-PLAN.md
|
Create tenant-cidr-overlap-correction-PLAN.md
|
7 days ago
|
|
|
tenant-onboarding-contract.md
|
addendum 38: Horizon 3-account walkthrough -- all contract-correct, object storage first live proof; DOCFIX-119 clientdocs GUI-reality alignment (receipt re-recorded) + DOCFIX-120 contract 5.1/5.3 live verdicts; dashboard policy override first apply FAILED acceptance + REVERTED (rework in flight)
|
6 days ago
|
|
|
upstream-bug-draft-dashboard-tls.md
|
D-072 dashboard TLS repair (executed) + DOCFIX-089 fail-closed check + BUNDLEFIX-011
|
8 days ago
|
|
|
v1-pre-deploy-fixes.md
|
Patches
|
10 days ago
|
|
|
v1-redeploy-changelog.md
|
ledger: re-seed machine-derived block from 2026-07-09 scan (DOCFIX next-free 130->139)
|
4 days ago
|
|
|
vr1-office1-as-built.md
|
D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
|
9 hours ago
|
