shankar0123 30970ab8a1 ci-pipeline-cleanup Phase 12: docs/ci-pipeline.md + bundle artefacts ...

Bundle: ci-pipeline-cleanup, Phase 12.

NEW docs/ci-pipeline.md (operator-facing guide to the on-push pipeline):
- Trigger model (push, daily, tag)
- Per-job deep-dive for all 5 CI jobs + 2 CodeQL jobs
- The 20 regression guards table with what each catches
- Coverage threshold management
- Three-tier make convention (verify, verify-deploy, verify-docs)
- Adding a new check (where it goes, auto-pickup)
- Troubleshooting matrix
- Status check accounting (19 → 7)
- Required GitHub branch protection list (operator action)

NEW cowork/ci-pipeline-cleanup/v2.X.0-release-notes.md — operator-facing
release notes covering all 13 phases + the operator action items
post-merge.

NEW cowork/ci-pipeline-cleanup/reddit-beat.md — Reddit / HN announce
draft (don't auto-post; operator times manually after the tag lands).

Active Focus updated in cowork/CLAUDE.md (workspace, separate edit
since CLAUDE.md isn't in the repo) — added ci-pipeline-cleanup entry
to 'Recently shipped bundles' + new env-var summary line + two new
operator-decision items (RAM headroom + branch protection rules).

2026-04-30 20:59:22 +00:00

..

screenshots

fix(security): TICKET-009 add HTTP timeouts to notifier clients

2026-03-27 21:33:31 -04:00

architecture.md

docs(est): EST RFC 7030 operator guide + WiFi/802.1X recipe + IoT bootstrap recipe + FreeRADIUS integration + architecture + README

2026-04-30 02:20:30 +00:00

certctl-for-cert-manager-users.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

ci-pipeline.md

ci-pipeline-cleanup Phase 12: docs/ci-pipeline.md + bundle artefacts

2026-04-30 20:59:22 +00:00

compliance-nist.md

Unify API auth + RFC-compliant CRL/OCSP (M-002 + M-003 + M-006, auto-closes M-001)

2026-04-18 18:17:41 +00:00

compliance-pci-dss.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

compliance-soc2.md

docs: reconcile scheduler topology across sibling docs (7 → 12 loops)

2026-04-20 02:51:34 +00:00

compliance.md

fix(bundle-6): Audit Integrity + Privacy — 3 audit findings closed

2026-04-26 00:26:44 +00:00

concepts.md

docs: README + concepts + features reflect CRL/OCSP responder bundle

2026-04-29 03:20:44 +00:00

connector-apache.md

docs: deployment vendor matrix + per-connector deep-dive docs (NGINX + K8s + IIS + Apache + F5)

2026-04-30 16:16:48 +00:00

connector-f5.md

docs: deployment vendor matrix + per-connector deep-dive docs (NGINX + K8s + IIS + Apache + F5)

2026-04-30 16:16:48 +00:00

connector-iis.md

ci-pipeline-cleanup Phase 6 follow-up: IIS operator playbook + matrix doc

2026-04-30 20:47:49 +00:00

connector-k8s.md

docs: deployment vendor matrix + per-connector deep-dive docs (NGINX + K8s + IIS + Apache + F5)

2026-04-30 16:16:48 +00:00

connector-nginx.md

docs: deployment vendor matrix + per-connector deep-dive docs (NGINX + K8s + IIS + Apache + F5)

2026-04-30 16:16:48 +00:00

connectors.md

docs(est): EST RFC 7030 operator guide + WiFi/802.1X recipe + IoT bootstrap recipe + FreeRADIUS integration + architecture + README

2026-04-30 02:20:30 +00:00

crl-ocsp.md

docs: production hardening II — DR runbook + crl-ocsp updates + features.md env vars (Phase 10)

2026-04-30 05:19:56 +00:00

database-tls.md

Bundle B: Auth & transport surface tightening — 5 findings closed

2026-04-26 23:09:10 +00:00

demo-advanced.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

deployment-atomicity.md

docs: deploy-hardening I — atomic deploy + post-verify operator guide + connectors / README updates

2026-04-30 15:30:45 +00:00

deployment-vendor-matrix.md

ci-pipeline-cleanup Phase 6 follow-up: IIS operator playbook + matrix doc

2026-04-30 20:47:49 +00:00

disaster-recovery.md

docs: production hardening II — DR runbook + crl-ocsp updates + features.md env vars (Phase 10)

2026-04-30 05:19:56 +00:00

est.md

docs(est): EST RFC 7030 operator guide + WiFi/802.1X recipe + IoT bootstrap recipe + FreeRADIUS integration + architecture + README

2026-04-30 02:20:30 +00:00

examples.md

docs(README,features,examples): replace stale source counts with rebuild commands (S-1 master)

2026-04-25 16:26:44 +00:00

features.md

docs: deploy-hardening I — atomic deploy + post-verify operator guide + connectors / README updates

2026-04-30 15:30:45 +00:00

legacy-est-scep.md

refactor(scep-gui): rebrand SCEP admin surface to per-profile tabbed interface (Profiles + Intune + Recent Activity)

2026-04-29 17:46:42 +00:00

mcp.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

migrate-from-acmesh.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

migrate-from-certbot.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

openapi.md

v2.0.47: HTTPS Everywhere — TLS-only control plane, agents/CLI/MCP

2026-04-20 03:43:10 +00:00

qa-test-guide.md

Bundle Q (Coverage Audit Closure): property-based pilot + hygiene — L-001/L-002/L-003/L-004/I-001 closed

2026-04-27 18:36:47 +00:00

quickstart.md

fix(db): emit volume-state guidance on postgres auth failure (U-1, #10)

2026-04-24 23:21:26 +00:00

scep-intune.md

fix(scep-intune): close 11 audit gaps from 2026-04-29 pre-tag review

2026-04-29 20:28:53 +00:00

security.md

Bundle G: Final audit closure — L-004 + D-003/4/5/7 closed; 54/55 + 7/7

2026-04-27 02:27:44 +00:00

test-env.md

v2.0.48: swap self-signed TLS bootstrap algorithm ed25519 → ECDSA-P256

2026-04-20 04:17:05 +00:00

testing-guide.md

Bundle P.2-extended CI follow-up: rephrase aspirational env-var references to fix G-3 guard

2026-04-27 19:16:19 +00:00

testing-strategy.md

Bundle G: Final audit closure — L-004 + D-003/4/5/7 closed; 54/55 + 7/7

2026-04-27 02:27:44 +00:00

tls.md

Bundle D: Documentation & transparency sweep — 8 findings closed

2026-04-27 00:47:15 +00:00

upgrade-to-tls.md

v2.0.48: swap self-signed TLS bootstrap algorithm ed25519 → ECDSA-P256

2026-04-20 04:17:05 +00:00

upgrade-to-v2-jwt-removal.md

fix(security,config): remove unimplemented JWT auth-type, close silent downgrade (G-1)

2026-04-25 00:22:23 +00:00

why-certctl.md

Update LICENSE metadata

2026-04-26 23:29:59 +00:00