Trilltechnician/incredigo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add ROADMAP + STATE snapshot, refresh CLAUDE.md dev state (M0)

Browse Source 
Record the 2026-07-14 development snapshot and the roadmap to a deployable
rotation system. Update CLAUDE.md "Where development is" — the stale entry
claimed zero rotation drivers; reality is 22 drivers + a wired Mode A execute
spine (8 LIVE-VM / 14 MOCK-ONLY). Gitignore the incredigo-map.html build
artifact and the local rotation runbook.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
leetcrypt
2026-07-15 11:00:29 -07:00
parent d237098d83
commit 0be82839b9
4 changed files with 318 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CLAUDE.md
+20 -12
View File
@@ -36,19 +36,27 @@ Both must run **interactively or fully headless** (`$INCREDIGO_PASSPHRASE`, no T
do the automatable rotations unattended, and emit a guided worklist (+ links) for the
credentials that legitimately require a human. See `docs/ROTATION.md` Part II.
## Where development is (2026-06-15)
## Where development is (2026-07-14)
- **v1 shipped:** discover → migrate → expiry → sealed export/import. 8 scanners
(aws, env, netrc, ssh, docker, kube, git, file/`--path`); sealers age (default),
hmac, openssl. Tests green, `-race` clean.
- **Rotation: design + safety-spine + guided manual layer.** `internal/rotate` has
the `Rotator` interface and the **mandatory backup gate** (`Snapshot`); dry-run
`incredigo rotate` refuses `--execute`. The guided layer is built and **read-only**:
`internal/links` (offline change-password URL generation: curated table + RFC 8615
well-known + host fallback), `internal/worklist` (secrets-free worklist), and
`internal/tui` (Bubble Tea walk-through) — surfaced as `incredigo worklist` and
`incredigo guide`. **Zero rotation drivers exist; nothing changes a credential at
any service yet** — keep it that way until explicitly authorized.
> Snapshot: [`docs/STATE-2026-07-14.md`](docs/STATE-2026-07-14.md) · plan:
> [`docs/ROADMAP.md`](docs/ROADMAP.md) · visual map: `incredigo-map.html`.
- **v1 shipped:** discover → migrate → expiry → sealed export/import. 9 scanners
(aws, env, netrc, ssh, docker, kube, git, tea, file/`--path`); sealers age
(default), hmac, openssl. 179 tests green, `-race` clean.
- **Rotation: 22 drivers + wired Mode A execute spine.** All drivers self-register;
`rotate --execute` runs behind `INCREDIGO_ALLOW_EXECUTE=1` **and** the mandatory
verified-backup gate (`Snapshot`). Proof status is DATA (`internal/rotate/proofs.go`
mirrored in `docs/ROTATION-PROOFS.md`): **8 LIVE-VM** (postgres, mysql, redis,
mongo, wireguard, gitea, appsecret, k8s), **14 MOCK-ONLY**. **No real (host)
credential has been rotated yet** — every real rotation still requires explicit
per-credential authorization (safe-candidate ladder, ROADMAP M2).
- **Guided manual layer done:** `internal/links` + `internal/worklist` +
`internal/tui` → `incredigo worklist` / `incredigo guide` (read-only).
- **Phase B scaffolded, not wired:** 12 pwstore adapters, pwgen, staging;
`incredigo passwords pw-*` flow incomplete (ROADMAP M4).
- **Known weak spots:** sink 30% / cmd 4.3% coverage, no CI, lab-provision scripts
not in repo (ROADMAP M0–M1).
## Hard rules (do not violate — this tool holds real credentials)