reachableceo/org-buildout
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15 Commits 1 Branch 0 Tags
3b1a3e82a832b9c28c32eab1dda04d64fe7ddbad
Commit Graph
15 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
TSYS Group COO 3b1a3e82a8 docs: all 9 agent invites merged, manifest fully READY for session 3 2026-09-07 14:51:13 -05:00
TSYS Group COO 1b6b12632b docs: session 3 flow -- merge invites, grant app access, loop manifest 2026-09-07 14:51:13 -05:00
TSYS Group COO 7a1ae1be07 docs: session 3 handoff -- all flows proven, loop remaining agents 
Session 2 outcome: BW sync fixed, Cloudron 2FA on, all four systems
provisioned for vp-techops with verified API keys. Flows consolidated
into provision-agent.py and documented in the provisioner JOURNAL.md.

Session 3 job: populate agents.yaml invites (plus Cloudron app-access
grants) and run the manifest loop for the remaining five agents.
 2026-09-07 14:51:13 -05:00
TSYS Group COO 6c7cb6bb52 docs: add resume-prompt.md for session 2 handoff 
Comprehensive handoff document covering:
- What works (BW host CLI, bw_helper.py lifecycle safety)
- What's broken (container BW sync, 2FA, Redmine/Discourse SSO)
- Cloudron Pankow UI patterns (keyboard.type, role=button)
- Per-app SSO button selectors
- Mistakes from session 1 to avoid repeating
- Suggested first actions (fix BW sync before Playwright)

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
TSYS Group COO 6abd688ff5 chore: add AGPLv3 license, update README license section 
💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
TSYS Group COO dce7164889 feat: container-based Bitwarden CLI using native Rust binary (no Node.js) 
Replace the Node.js @bitwarden/cli dependency with the pre-compiled
native Rust binary (v2026.7.0) for CMMC/ITAR/STIG audit readiness.
The Node.js dependency tree was a significant attack surface that
would fail security audits.

Infrastructure:
- docker/bw-native/Dockerfile: minimal debian-slim + native bw binary
- scripts/bw-cli.sh: host wrapper handling full auth lifecycle
  (config, API-key login, unlock, sync) inside the container
- scripts/bw-entrypoint.sh: container entrypoint for auth lifecycle
- scripts/bw-install.sh: one-command installer (download, build, deploy)

Root causes fixed:
- ~/.config/bw/env values now single-quoted (master password has $
  chars that shell expansion corrupted, truncating 32→16 chars)
- Added BW_SERVER for self-hosted instance (pwvault.turnsys.com)
- Entrypoint bw config server tolerates re-run (|| true)

All scripts pass shellcheck with zero warnings including info-level.
Verified: bw status (unlocked, coo@turnsys.com), generate, list items.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
TSYS Group COO 2c91545c0f docs: update STATUS.md with code review results + repo inventory 
Added provisioning code review findings (8 bugs found and fixed in
agent-identity-provisioning repo). Updated repo inventory to show
total commits per repo this session.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
TSYS Group COO fbf9a6571c docs: add STATUS.md + questions-v1.md for TSGCOO handoff 
STATUS.md tracks the full state of the agent identity bootstrap: what's
built, all 6 blockers with specific remediation steps, the provisioning
execution path, and repo inventory.

questions-v1.md captures 7 questions for Charles (4 blocking, 3
non-blocking). Blocking: docker group, BW credentials, Cloudron invites,
Gitea push access.

Also adds AGENTS.md, STATUS.md, questions-v1.md to README index.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
TSYS Group COO 88a2f14415 docs: add AGENTS.md to orient agents working in this repo 
This is a docs-only repo with no build/test/lint commands. AGENTS.md
captures the non-obvious knowledge an agent needs: the org glossary
(TSYS Group/KNEL/TCTC/PFV/CMMC/STIG/ITAR), the document map, the
Discourse/Redmine systems-of-record workflow, doc conventions, and
gotchas (missing LICENSE, k8s.md filename mismatch, snapshot dates).

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-09-07 14:51:13 -05:00
mrcharles eaaac18159 docs: final session close — TSGCOO prompt ready for handoff 
Session complete. All planning, architecture, and automation code
pushed. TSGCOO agent bootstrap prompt ready for Charles to deploy.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 11:17:49 -05:00
mrcharles 57f582c0c8 docs: TSGCOO prompt — use clone-as.sh for per-agent git identity 
Updated clone instructions to use the new agent identity tooling
(clone-as.sh, agent-profile.sh, bw-git-credential.sh) instead of
raw git clone. Explains how agents share one Linux account while
maintaining per-identity git attribution.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 10:59:24 -05:00
mrcharles 4b7b24d65f docs: TSGCOO prompt — clone TSYSGroupAIOS first for house rules 
The agent's first action is cloning TSYSGroupAIOS, reading
BASELINE-PROMPT.md, installing hooks, and summarizing the rules
back to Charles (session-start gate) before any work begins.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 10:52:51 -05:00
mrcharles cc51200332 docs: add TSGCOO session bootstrap prompt 
Self-contained prompt file Charles copies into the TSGCOO Linux account.
Covers: prereq check, BW-only credential model, step-by-step provisioning
execution, Discourse VP SecOps creation, verification, and report-back.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 10:51:41 -05:00
mrcharles be5d840c44 docs: clarify BW-only credential model + reachableceo role 
- BW access info is the ONLY secret on disk; everything else in BW
- reachableceo session stays as Charles's personal assistant
- TSGCOO session runs the provisioning + holds BW access info
- Discourse admin via system username (not reachableceo)
- reachableceo will handle ticket transitions to new agents

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 10:49:07 -05:00
mrcharles 8c76cf1bab docs: initial commit — Q2/Q3 transition planning docs 
Planning documents for TSYS Group's COO→CTO handoff and AI agent
identity architecture. Shared publicly as a bootstrapping reference.

Includes: org prompts, transition map, agent identity bootstrap plan,
TechOps/K8s/SecOps context notes.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
 2026-08-13 10:43:48 -05:00