3 Commits

Include renames

Author	SHA1	Message	Date
Audiobuzz	0a3deca335	docs: cite clean build 28d31e4 for F-02 bench-verification ... F-02/P-17 SSH host certs re-verified on the rebuilt 28d31e4 image (not the hand-fixed host): the auto-derived FQDN principal is baked, so by-FQDN no-TOFU admin login survives a reboot with zero manual steps. Cite the digest in the design-doc status + bench-outcome, SSP v0.4 status line + R-16 row, and Annex A 2.4 row + R-16 register row.	2026-07-11 11:31:57 +00:00
Audiobuzz	8e1418c19d	docs(ssh-host-cert): record F-02 bench-verified end-to-end (2026-07-11) ... SSH host-cert flow proven on comet-beacon-54 (TPM-mTLS -> broker -> step-ca -> cert install -> admin login by FQDN, no TOFU; per-boot auto-re-sign across reboot). Design doc gains a Bench outcome section (defects+fixes table, retracted empty-principals finding, post-boot TOFU window, deploy caveat); status flips to BENCH-VERIFIED. TODO 'SSH host keys' caveat marked RESOLVED (F-02/P-17). The bench-surfaced code/serving fixes live on branch poam-hardening (28d31e4).	2026-07-11 09:50:33 +00:00
Audiobuzz	fbb8100ecd	Adding secure NTP	2026-07-11 17:32:05 +09:30