Shankar 28d8771d8c docs: rewrite features.md, audit README + architecture against repo ...

Rewrote docs/features.md from scratch as authoritative feature inventory
(1255 lines, every claim verified against source files).

Audited README.md and architecture.md against repo — fixed 19 stale
references: K8s Secrets status, issuer counts, dashboard page counts,
CI thresholds, missing connectors in Mermaid diagrams, OpenAPI operation
count, GetCACertPEM behavior, and V2/V4 roadmap accuracy.

Also includes related fixes discovered during audit:
- Scheduler skips expired/failed/revoked certs from auto-renewal
- Seed demo expiry dates moved outside 31-day scheduler query window
- Agent pages use correct last_heartbeat_at field name

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-15 00:22:57 -04:00

..

000001_initial_schema.down.sql

Implement M3: expiration threshold alerting with dedup and status transitions

2026-03-15 00:03:43 -04:00

000001_initial_schema.up.sql

perf: add 5 database indexes for scheduler query optimization

2026-03-20 01:20:21 -04:00

000002_agent_metadata.down.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

000002_agent_metadata.up.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

000003_certificate_profiles.down.sql

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

000003_certificate_profiles.up.sql

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

000004_agent_groups.down.sql

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

000004_agent_groups.up.sql

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

000005_revocation.down.sql

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

000005_revocation.up.sql

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

000006_discovery.down.sql

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

000006_discovery.up.sql

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

000007_network_discovery.down.sql

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

000007_network_discovery.up.sql

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

000008_verification.down.sql

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00

000008_verification.up.sql

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00

000009_issuer_config.down.sql

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

000009_issuer_config.up.sql

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

000010_target_config.down.sql

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

000010_target_config.up.sql

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

seed_demo.sql

docs: rewrite features.md, audit README + architecture against repo

2026-04-15 00:22:57 -04:00

seed_test.sql

feat: S/MIME certificate support in integration tests + test env docs

2026-04-02 18:32:57 -04:00

seed.sql

Implement M3: expiration threshold alerting with dedup and status transitions

2026-03-15 00:03:43 -04:00