From 6e4fe99cac15fe031330a815a5a5fe87c6433e45 Mon Sep 17 00:00:00 2001
From: Chris Christiansen <chris.christiansen@vauco.no>
Date: Wed, 2 Sep 2026 18:32:54 +0000
Subject: [PATCH] feat(tyr): initialize step-ca and update roadmap

---
 .gitignore                   | 1 +
 project/roadmap.md           | 3 +++
 tyr/memory_bank/completed.md | 5 +++++
 3 files changed, 9 insertions(+)
 create mode 100644 tyr/memory_bank/completed.md

diff --git a/.gitignore b/.gitignore
index aec4cd7..736d95e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -53,3 +53,4 @@ infrastructure/terraform/tfplan
 emma/data/morphic.db
 
 
+tyr/certs/ca_password.txt
diff --git a/project/roadmap.md b/project/roadmap.md
index db6eeaf..e60c51d 100644
--- a/project/roadmap.md
+++ b/project/roadmap.md
@@ -6,6 +6,9 @@ This document tracks the high-level goals and future development milestones for
 - [x] Scaffold TYR repo structure.
 - [x] Commit & deploy initial default-deny policy bundle.
 
+## Phase 1: TYR Service Identity (SPIFFE/SVID)
+- [~] Deploy step-ca (staged, pending sudo)
+
 ## Phase 3: Memory Bank & Project Management
 - [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools.
 - [x] Implement `build_and_deploy_service` MCP tool.
diff --git a/tyr/memory_bank/completed.md b/tyr/memory_bank/completed.md
new file mode 100644
index 0000000..a8aba90
--- /dev/null
+++ b/tyr/memory_bank/completed.md
@@ -0,0 +1,5 @@
+# Completed Tasks - TYR
+
+- **Phase 1.1: Deploy step-ca**
+  - Staged: `step ca init` was successful.
+  - Pending: Awaiting manual `sudo systemctl enable --now step-ca` execution.