marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

S25: HSM custody, sync.pfc, georgelambert.org/pfc deep links
Some checks are pending
review / inventory (push) Waiting to run
Details

Browse source 
UserReview leftovers implemented without rewriting 70 website repos
and without fail-closing pfc-py-admin.
This commit is contained in:
George Lambert 2026-09-15 23:19:44 -04:00
parent 8c09abecae
commit aa7c837493
9 changed files with 171 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Historical-Information.MD
View file

@ -102,6 +102,13 @@ Go leaf reject paths, catalog covers subjects.json).
After a context reset: read this file, then `Remaining-Work.MD`.
## S25 (UserReview leftovers)
- HSM custody: `docs/HSM-CUSTODY.md` + `rotate_config_key.py`. Private keys stay on host.
- NPE: adapter uses real `npe send|keygen` CLI. `GET /v1/npe` probe. **`PFC_REQUIRE_NPE` remains unset.**
- `sync.pfc.georgelambert.org` Caddy (DNS already pointed at 138).
- Deep links: console footer, hub `links.html`, `https://georgelambert.org/pfc/` (one page; 70 website repos not rewritten).
Go `pfc-repl` now serves loopback `GET 127.0.0.1:18784/health`; admin `PFC_REPL_URL` points there. Ingest replicas a/b do not bind HTTP.
## Do not