feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769][#783]

Excluded admin-code/*SECRETS.inc (real Nitrokey HSM PINs in the public source repo) — SECRETS.inc.example template added in their place. Rotation/history-purge ruling pending in #783. legacy-* trees exempt from lint/pointer checks (historical verbatim code). https://projects.knownelement.com/issues/769#note-4152
2026-09-04 07:01:46 -05:00
parent 2eca50490d
commit af7c0f3478
29 changed files with 738 additions and 3 deletions
@@ -0,0 +1,6 @@
+# Port provenance
+
+Imported from KNEL/TSYS-CA@master (2026-09-04) per OQ2 ruling (#769). The two
+*SECRETS.inc files were excluded — they contained real Nitrokey HSM PINs in
+the public source repo (security ticket #783, founder rotation decision
+pending). Legacy repo now carries a redirect README.