GovOPlaN/govoplan
2
0
Fork 0
Code Issues 18 Pull Requests Actions Packages Projects Releases 3 Wiki Activity

Reconcile encryption interface surfaces
Dependency Audit / dependency-audit (push) Failing after 1m40s
Details
Deployment Installer / deployment-installer (push) Successful in 6s
Details
Security Audit / security-audit (push) Successful in 10m33s
Details

Browse Source
This commit is contained in:
zemion
2026-08-04 01:28:03 +02:00
parent d9f67b5c26
commit 1a68565ba0
1 changed files with 74 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/inventory/endpoint-surface-declarations.json
+74 -52
View File
@@ -652,108 +652,130 @@
"repository": "govoplan-docs" "repository": "govoplan-docs"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "GET", "method": "GET",
"path": "/encryption/disable-preflight", "path": "/encryption/disable-preflight",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The Encryption administration panel displays disable readiness and bounded blocking envelope references.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "intentionally_headless",
"method": "POST", "method": "POST",
"path": "/encryption/envelopes", "path": "/encryption/envelopes",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Feature modules register envelopes while retaining content ownership; the operator UI must not construct feature content envelopes.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "GET",
"path": "/encryption/envelopes",
"rationale": "The Encryption administration panel consumes the bounded, secret-free envelope summary contract.",
"repository": "govoplan-encryption"
},
{
"category": "intentionally_headless",
"method": "GET", "method": "GET",
"path": "/encryption/envelopes/{}", "path": "/encryption/envelopes/{}",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Owning modules resolve a specific full envelope through the capability/API contract; the operator UI uses the secret-free summary projection.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "GET",
"path": "/encryption/migrations",
"rationale": "The Encryption administration panel displays bounded migration state and evidence counts.",
"repository": "govoplan-encryption"
},
{
"category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/migrations", "path": "/encryption/migrations",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Encryption custodians can authorize a two-phase migration from a bounded envelope summary.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "intentionally_headless",
"method": "POST", "method": "POST",
"path": "/encryption/migrations/{}/outcome", "path": "/encryption/migrations/{}/outcome",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Only the owning module or governed worker can attest the durable content outcome and exact target envelope.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST",
"path": "/encryption/migrations/{}/reconcile",
"rationale": "Encryption custodians can re-read recorded provider migration state without declaring an outcome.",
"repository": "govoplan-encryption"
},
{
"category": "ui_reachable",
"method": "GET",
"path": "/encryption/recoveries",
"rationale": "The Encryption administration panel displays bounded recovery requests, quorum, expiry, and state.",
"repository": "govoplan-encryption"
},
{
"category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/recoveries", "path": "/encryption/recoveries",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Authorized custodians can request an expiring high-assurance recovery ceremony.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/recoveries/{}/decision", "path": "/encryption/recoveries/{}/decision",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The recovery table exposes explicit approve/reject decisions with assurance, reason, and optimistic revision.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "GET",
"path": "/encryption/vaults",
"rationale": "The Encryption administration panel consumes the bounded, secret-free vault summary contract.",
"repository": "govoplan-encryption"
},
{
"category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/vaults", "path": "/encryption/vaults",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Encryption custodians can create a governed vault without entering or receiving raw key material.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "intentionally_headless",
"method": "GET", "method": "GET",
"path": "/encryption/vaults/{}", "path": "/encryption/vaults/{}",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "Capability consumers may resolve the complete vault reference; the operator UI uses the secret-free summary projection.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/vaults/{}/destruction", "path": "/encryption/vaults/{}/destruction",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The vault action group schedules destructive key lifecycle operations with explicit consequences.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/vaults/{}/reconcile", "path": "/encryption/vaults/{}/reconcile",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The vault action group reconciles an outcome-unknown provider operation.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/vaults/{}/revoke", "path": "/encryption/vaults/{}/revoke",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The vault action group revokes the current key with policy, assurance, reason, and revision evidence.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "missing_ui", "category": "ui_reachable",
"method": "POST", "method": "POST",
"path": "/encryption/vaults/{}/rotate", "path": "/encryption/vaults/{}/rotate",
"rationale": "Encryption custodian, lifecycle, and recovery administration UI is tracked separately.", "rationale": "The vault action group rotates the current key with policy, assurance, reason, and revision evidence.",
"repository": "govoplan-encryption", "repository": "govoplan-encryption"
"tracking_issue": "https://git.add-ideas.de/GovOPlaN/govoplan-encryption/issues/4"
}, },
{ {
"category": "ui_reachable", "category": "ui_reachable",