| /adr/0033-identity-bearers-on-the-mark-front-door.md |
0.80 |
ADR 0033: Identity bearers on the mark front door |
adr, decision, bearer, front-door, quic, udp-443, alpn, identity, oidc, auth, watch, fan-out, knowledge-server, broker, grant, rfc-8707, audience, tenancy |
| /plans/five-minute-appliance/authelia-spike-and-build.md |
0.80 |
Authelia spike and build |
five-minute-appliance, authelia, spike-result, claims-policy, email-verified, id-token, userinfo, oidc, install-stack, stack-auth-proxy, agent-release, caddyfile, container-harness, build-record |
| /plans/five-minute-appliance/design.md |
0.80 |
Design |
five-minute-appliance, design-decisions, sslip, no-domain, systemd, native-install, authelia, idp, pocket-id, dex, oidc, email-verified, zero-prompts, components, topology, install-surface, stack-flag, delivery-slices, risks, caddy |
| /plans/universe-deployment.md |
0.75 |
Plan: Universe Deployment |
plan, universe-deployment, kubernetes, helm, broker, demarkus-agent, demarkus-server, observability, slog, release-pipeline, ghcr, goreleaser, oidc, token-mint, argo-cd, kustomize, phase-6, decision, enterprise |
| /plans/universe-onboarding.md |
0.70 |
Plan: Universe Onboarding |
plan, universe, onboarding, broker, oidc, device-flow, rfc-8628, refresh-tokens, knowledge-join, soul-join, claude-code, plugin, mcp-gateway, kind, deployment, helm, status:complete |
| /plans/universe-library.md |
0.70 |
Universe Library — Plan |
plans, universe-library, web, frontend, htmx, go, reading-room, knowledge-system, librarian, roadmap, plan, broker, oidc, goldmark, bluemonday, mcp-client, cataloging-desk, ai-librarian, public-face, demarkus-library, decision |
| /plans/knowledge-system-gke-deploy.md |
0.65 |
Knowledge System — GKE Reference Deployment |
plan, gke, gitops, opentofu, argocd, openbao, bank-vaults, cloud-dns, external-dns, knowledge-system, deployment, broker, backups, csi-volumesnapshots, github-actions, template-repo, google-cloud, oidc, status:complete |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-06-08.md |
0.65 |
2026-06-08 — Broker-global OIDC AllowDomains gate |
broker, oidc, allow-domains, hd, google-workspace, poc, claims-pointer-refactor, authorization, journal, helm-chart, customer-name-policy, refresh-token, kind-smoke, deploy-repo, debt, device-flow, auth-code-grant, gocritic |
| /plans/architecture-quality/findings-broker.md |
0.60 |
Architecture quality findings: broker |
plan, architecture-quality, findings, broker, oauth, oidc, mcp-gateway, tenant, provisioner, duplication, code-quality, sweep |