v1.4 - Operator UX + Security Hardening

New Issue

Operator tooling (scripts, dashboards, tutorials), NocoDB views, container hardening, DPIA, threat model, PII scrub (held by REQ-INB-57 until board approval lands). Status: active. Label: major/v1.

No due date

100% Completed

INTV-3 — Audit v1.4.0 re-dispatch wave for 100% dual APPROVED review compliance (REQ-INB-37g/h/i) type:needs-triage

#188 by cto-ciagent was closed 2026-06-15 20:29:42 +00:00

INTV-3 — Configure main branch protection requiring dual APPROVED reviews (REQ-INB-37a/b/c/d/e/f) type:needs-triage

#187 by cto-ciagent was closed 2026-06-15 20:29:41 +00:00

INTV-2 — Publish public-facing threat model summary and seek CPO review (REQ-INB-59) type:needs-triage

#186 by cto-ciagent was closed 2026-06-15 20:29:41 +00:00

INTV-2 — Create architecture lift diagram (Mermaid + SVG + PNG) (REQ-INB-59) type:needs-triage

#185 by cto-ciagent was closed 2026-06-15 20:29:41 +00:00

INTV-2 — Produce threat-to-control matrix referencing container hardening (REQ-INB-59) type:needs-triage

#184 by cto-ciagent was closed 2026-06-15 20:29:40 +00:00

INTV-2 — Maintain threat register with severity and status (REQ-INB-59) type:needs-triage

#183 by cto-ciagent was closed 2026-06-15 20:29:40 +00:00

INTV-2 — Build component × STRIDE table (REQ-INB-59) type:needs-triage

#182 by cto-ciagent was closed 2026-06-15 20:29:40 +00:00

INTV-2 — Produce trust boundary map for v1.4 architecture (REQ-INB-59) type:needs-triage

#181 by cto-ciagent was closed 2026-06-15 20:29:39 +00:00

INTV-2 — Complete DPIA review pass with CPO (REQ-INB-58) type:needs-triage

#180 by cto-ciagent was closed 2026-06-15 20:29:39 +00:00

INTV-2 — Define DPIA retention schedule and rights-request workflow (REQ-INB-58e/f) type:needs-triage

#179 by cto-ciagent was closed 2026-06-15 20:29:39 +00:00

INTV-2 — Draft DPIA lawful-basis table and data-minimisation checklist (REQ-INB-58c/d) type:needs-triage

#178 by cto-ciagent was closed 2026-06-15 20:29:39 +00:00

INTV-2 — Produce DPIA data-flow diagram mirroring Architecture §4.2 (REQ-INB-58b) type:needs-triage

#177 by cto-ciagent was closed 2026-06-15 20:29:38 +00:00

INTV-2 — Define canary rollout and rollback runbook recipe (REQ-INB-55j) type:needs-triage

#176 by cto-ciagent was closed 2026-06-15 20:29:38 +00:00

INTV-2 — Lock supply-chain with lockfile + Renovate config (REQ-INB-55i) type:needs-triage

#175 by cto-ciagent was closed 2026-06-15 20:29:38 +00:00

INTV-2 — Add admission hook rejecting unsigned images (REQ-INB-55h) type:needs-triage

#174 by cto-ciagent was closed 2026-06-15 20:29:37 +00:00

INTV-2 — Enable cosign sign + SBOM in build pipeline (REQ-INB-55h) type:needs-triage

#173 by cto-ciagent was closed 2026-06-15 20:29:37 +00:00

INTV-2 — Add HEALTHCHECK directive to long-running services (REQ-INB-55d) type:needs-triage

#172 by cto-ciagent was closed 2026-06-15 20:29:37 +00:00

INTV-2 — Add Seccomp and AppArmor profiles (REQ-INB-55f/g) type:needs-triage

#171 by cto-ciagent was closed 2026-06-15 20:29:37 +00:00

INTV-2 — Apply runtime policy bundle: cap-drop, no-new-privileges, read-only rootfs (REQ-INB-55e) type:needs-triage

#170 by cto-ciagent was closed 2026-06-15 20:29:36 +00:00

INTV-2 — Enforce non-root UID across services (REQ-INB-55c) type:needs-triage

#169 by cto-ciagent was closed 2026-06-15 20:29:36 +00:00

1 2 3 4 5