Jon Chery cf0df0f157 docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill) ...

---ci---
project: orca
phase: 0
milestone: v0.12
status: specify
---/ci---

Threat-model review of entire surface incl OS (25 findings F1..F25).
Adopts R-021 (no Orca credentials: human=OIDC, machine=mTLS/SPIFFE).
Bundled Dex + WebAuthn (passkeys) as default password-free authenticator.
Master key seal-to-OIDC + Shamir 3-of-5 recovery.
30 net-new requirements (REQ-119..REQ-148). 29 phases. Binding conditions C-29..C-38.

2026-08-07 10:45:07 +00:00

..

ARCHITECTURE.md

feat(P00): deprecation sweep + bash tooling gate + render contract + doc banners (v0.9 P00)

2026-08-05 16:26:26 +00:00

AUDIT_v0.2_P01.md

docs(audit): fix .ciagent/ file discipline findings from v0.2 P01 audit

2026-06-03 22:19:45 +00:00

AUDIT_v0.8.md

docs(milestone): complete coverage-trust-hardening — v0.8 milestone release

2026-08-04 12:25:58 +00:00

BASH_CAPABILITY_MAP_v0.9.md

feat(P00): deprecation sweep + bash tooling gate + render contract + doc banners (v0.9 P00)

2026-08-05 16:26:26 +00:00

C02_SYNCTHING_FEASIBILITY_v0.9.md

feat(P09): Syncthing storage replication + conflict resolution (REQ-081; gates C-02, C-14)

2026-08-05 18:38:49 +00:00

CA_MIGRATION_SPEC_v0.9.md

feat(P0a1): multi-namespace path resolver + config demotion + known_hosts flock + CA migration spec (v0.9 P0a1)

2026-08-05 16:38:26 +00:00

CHECKPOINT.json

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

CLARIFY_v0.11.md

docs(clarify): resolve C1-C5 for v0.11 phase 0

2026-08-07 03:37:40 +00:00

CLARIFY_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

config.json

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

GRILL_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

GRILL_v0.8.md

docs(P00): grill v0.8 plan — PROCEED-WITH-CONDITION (4 binding fixes applied)

2026-08-04 00:49:07 +00:00

GRILL_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

GRILL_v0.10.md

docs(P00): grill PASS (0.82) — 3 binding conditions, 3 phase challenges

2026-08-05 20:47:50 +00:00

GRILL_v0.11.md

docs(P00): grill v0.11 — 6 binding conditions (C-23..C-28), P10 split into P10a/P10b

2026-08-07 03:40:55 +00:00

GRILL_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

IDEATION_v0.7.md

docs(P00): v0.7 ideation results — 13 accepted, 0 skipped

2026-08-03 20:29:37 +00:00

IDEATION_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

IDEATION_v0.10.md

docs(P00): ideate — 8 ideas accepted (REQ-091..098), ROADMAP renumbered

2026-08-05 20:47:10 +00:00

IDEATION_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

IDEATION.md

docs(P00): ideation - 34 ideas accepted

2026-06-03 21:03:59 +00:00

PERSONAS.md

docs(P00): research findings + persona assessment for v0.11

2026-08-07 03:38:17 +00:00

PHASE1_VERIFICATION_v0.6.md

docs(P01): verification report — all 4 layers PASS

2026-08-03 19:48:56 +00:00

PHASE1_VERIFICATION_v0.7.md

fix(P01): register orca cert command tree + cert_repo tests (REQ-053)

2026-08-04 00:05:10 +00:00

PHASE1_VERIFICATION_v0.8.md

verify(P01): 4-layer verification PASS — REQ-057 covered

2026-08-04 01:51:26 +00:00

PHASE1_VERIFICATION.md

feat(P01): unified namespace root via ORCA_HOME + --system flag

2026-08-03 18:05:01 +00:00

PHASE2_VERIFICATION_v0.6.md

docs(P02): verification report — all 4 layers PASS

2026-08-03 19:56:05 +00:00

PHASE2_VERIFICATION_v0.7.md

feat(P02): HCL config file parsing — internal/config package (REQ-054)

2026-08-04 00:09:33 +00:00

PHASE2_VERIFICATION_v0.8.md

verify(P02): 4-layer verification PASS — REQ-058, REQ-059 + TOFU bugfix

2026-08-04 12:07:56 +00:00

PHASE2_VERIFICATION.md

feat(P02): install.sh 1-liner + in-place update + README quickstart

2026-08-03 18:49:50 +00:00

PHASE3_VERIFICATION_v0.6.md

docs(P03): verification report — all 4 layers PASS

2026-08-03 20:00:12 +00:00

PHASE3_VERIFICATION_v0.7.md

test(P03): coverage uplift — engine/transport/proxmox/audit ≥50% + dispatch.go EOF fix (REQ-055)

2026-08-04 00:18:58 +00:00

PHASE3_VERIFICATION_v0.8.md

verify(P03): 4-layer verification PASS — REQ-060

2026-08-04 12:18:48 +00:00

PHASE3_VERIFICATION.md

feat(P03): docker release — multi-stage Dockerfile + Gitea container registry publish

2026-08-03 18:52:36 +00:00

PHASE4_VERIFICATION_v0.7.md

feat(P04): --pprof opt-in on orca daemon (REQ-056, I-308)

2026-08-04 00:22:17 +00:00

PHASE5_VERIFICATION.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

PHASE6_VERIFICATION.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

PHASE7_SECURITY_AUDIT.md

fix(P07): harden .gitignore for .env and document pre-existing secret leak

2026-06-03 20:42:39 +00:00

PLAN_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

PLAN_v0.5.md

docs(P00): create phase plans

2026-08-03 18:01:16 +00:00

PLAN_v0.6.md

docs(P00): create phase plans

2026-08-03 19:40:21 +00:00

PLAN_v0.7.md

docs(P00): correct v0.7 tag line to v0.6.x per branch-strategy.md

2026-08-03 23:52:19 +00:00

PLAN_v0.8.md

docs(P00): grill v0.8 plan — PROCEED-WITH-CONDITION (4 binding fixes applied)

2026-08-04 00:49:07 +00:00

PLAN_v0.10.md

docs(P00): create phase plans — 5 phases, 4 waves, 18 tasks

2026-08-05 20:47:39 +00:00

PLAN_v0.11.md

docs(P00): create v0.11 phase plan (8 waves, 23 phases, 20 new REQs)

2026-08-07 03:39:27 +00:00

PLAN_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

PLANS.md

docs(P00): create 4 v0.2 phase plans

2026-06-03 21:09:15 +00:00

PRD_v0.9.md

docs(P00): resolve C-04 — relabel v1.0→v0.10 milestone, keep all 40 phases, v1.0 UAT-gated

2026-08-05 16:08:33 +00:00

PRD_v0.11.md

docs(specify): adopt R-017..R-020, D-215..D-237, REQ-099..REQ-118 for v0.11

2026-08-07 03:37:24 +00:00

PROJECT.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

RELEASE_POLICY.md

ship: v0.1 Foundation milestone complete (#1)

2026-06-03 20:08:57 +00:00

REQUIREMENTS.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

RESEARCH_v0.3.md

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

RESEARCH_v0.5.md

docs(P00): research findings

2026-08-03 18:00:26 +00:00

RESEARCH_v0.6.md

docs(P00): research findings

2026-08-03 19:39:14 +00:00

RESEARCH_v0.7.md

docs(P00): v0.7 research findings + persona assessment

2026-08-03 20:29:07 +00:00

RESEARCH_v0.8.md

docs(P00): v0.8 research findings + persona assessment

2026-08-04 00:49:07 +00:00

RESEARCH_v0.10.md

docs(P00): research findings — docs gap analysis + release/install root cause

2026-08-05 20:46:32 +00:00

RESEARCH_v0.11.md

docs(P00): research findings + persona assessment for v0.11

2026-08-07 03:38:17 +00:00

RESEARCH_v0.12.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00

REVIEW_v0.8.md

docs(milestone): complete coverage-trust-hardening — v0.8 milestone release

2026-08-04 12:25:58 +00:00

ROADMAP.md

docs(P00): v0.12 security-hardening phase 0 (specify/clarify/research/ideate/plan/grill)

2026-08-07 10:45:07 +00:00