4 Commits

Author	SHA1	Message	Date
Chris Christiansen	310dca2db5	feat(a2h2a): implement phase 1 approval flow ... Implements a secure, state-only approval workflow for A2H2A tickets. - Adds single-use token generation and validation. - Implements an IAP-gated HTML review page. - Adds state-changing approve/reject endpoints with full validation. - Introduces audit logging for ticket events. - Execution of tools remains disabled.	2026-09-04 12:23:59 +00:00
Chris Christiansen	3b6e4e4890	docs/code: clarify A2H2A prototype status and disable execution ... - Add Implementation Status section to A2H2A spec - Clarify Google Chat is notification-only - Add target approval architecture requirements - Add critical A2H2A safety principle to RUNBOOK.md - Remove unsafe approval/rejection endpoints from server.py - Enforce server-side parameter_hash calculation - Disable execution for all tools in A2H2A_TOOL_ALLOW_LIST	2026-09-04 12:00:07 +00:00
Chris Christiansen	79b100caff	docs(security): komplett sikkerhetsdokumentasjon med 7 manifestfiler ... - SECURITY.md: Overordnet visjon med lenker til alle manifestfiler - SECURITY_AUDITS.md: Historikk og To-Do liste - RUNBOOK.md: 6 operasjonelle scenarier (ukjent bruker, eksponert secret, 401/403, 50x, VPC-SC, BinAuthz) - INCIDENT_RESPONSE.md: PICERL-modell med eskaleringsmatrise - SECRET_MANAGEMENT.md: Policy + lokal utvikling - ACCESS_CONTROL.md: IAM-policy med service account-oversikt - COMPLIANCE.md: TYR, Binary Auth, KMS-attestasjon Opprydding: - Slettet sensitive filer (test_secret.txt, final-secret-test.txt, tyr/certs/ca_password.txt) - Slettet engangsskript og midlertidige filer - Oppdatert .gitignore med *.txt	2026-09-04 08:25:57 +00:00
Chris Christiansen	1ba991f582	feat(core): Fresh initialization - Deploy v3.6.1 Singularity Architecture	2026-09-03 04:03:09 +00:00