org-buildout/STATUS.md

STATUS.md — COO C2 lane

Maintained by the COO-line agent (COO command-and-control chat). Last updated: 2026-09-09

Scope (ruled by reachableceo 2026-09-07, corrected same day)

• This lane: COO, interfacing with SVP KNEL / SVP TCTC, org buildout (this repo), and interfacing to the BOD. Nothing lower than the SVPs.
• VP-level execution lives in its own lanes: security chats (SecOps / SecEng), SRE chat, OAM chat. This chat routes to them via Redmine; it does not do their work.
• DEFERRED: TCTC structure — reachableceo rules the week of 2026-09-14. Interface to SVP TCTC is in scope now; the division's internals are not.

Active tickets

ticket	state	item
#942	🔄	identity lifecycle: 2FA 32/32 DONE; vptechops admin in all 4 systems; next = SSO first-logins + API keys batch
#946	⏳	house rules PR #4 open (founder to merge) + release house-rules-v2026.09.0
#826	✅	all COO-chat perf asks done (gitea grant, org row, vpperf 2FA, knelperf project 94, Discourse Performance cat 77)
#940	⏳	org-buildout moved to TSYSGroupCorporate; pushes work via vptechops
#944	✅	SSH approval recorded (2026-09-09, app containers only)

Inbox

• Wazuh --change-all rotation: QUEUED — needs GLPI CR first (house rule); GLPI REST token auth debug half-done (apiclients + api_token/personal_token set for vptechops id 9, both still 401 — GLPI 11 token auth to dig).
• UI resets for stale pairs (phpipam/technitium/grafana/beszel/rancher): queued behind Wazuh in the rotation waves.
• SSO + API keys batch (32 identities × 4 systems): mechanism proven (oidc-login script + admin levers); batch run next.
• smcli setfield 400 bug (Vaultwarden "Data missing"): upstream fix pending; scripts carry the recreate workaround. Junk ztest_zz fields on ~9 items to clean when setfield is fixed.