notandClaude Opus 5 3567bc1f42 feat(infra): enforce MFA on the medewerker realm (refs #132) ...

Every seeded medewerker carries a TOTP credential, so Keycloak's conditional-OTP
step in both the browser and direct-grant flows always challenges them; a password
alone no longer yields a token. CONFIGURE_TOTP becomes a default required action so
any medewerker added later must enrol before logging in.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-03 09:08:50 +02:00

..

flowable

feat(workflow): diploma-eligibility DMN routes foreign diplomas via CBGV-advies (S-13, closes #14) (#101)

2026-07-20 07:26:52 +00:00

keycloak

feat(infra): enforce MFA on the medewerker realm (refs #132)

2026-09-03 09:08:50 +02:00

local

feat: read projection sourced from the register in Objecten (closes #153) (#155)

2026-09-01 07:26:33 +00:00

local-config

fix(infra): local compose parity + host-browser OIDC (closes #91) (#92)

2026-07-16 12:45:07 +00:00

objecten/setup_configuration

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

objecttypen/setup_configuration

feat(infra): Objecttypen API up in compose with a seeded static token (closes #139) (#142)

2026-07-27 08:51:14 +00:00

objecttypen-registerrecord

S-19a · ACL writes the RegisterRecord to Objecten on approval (closes #149) (#151)

2026-08-14 09:34:04 +00:00

observability

fix(observability): stop single-binary Tempo evicting its only ingester (closes #156) (#157)

2026-09-01 08:31:36 +00:00

opennotificaties

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

openzaak

feat(acl): resolve the zaaktype by identificatie, not a pinned URL (S-27, closes #113) (#118)

2026-07-22 14:49:25 +00:00

docker-compose.local.yml

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

docker-compose.yml

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

metrics-check.py

feat(obs): Prometheus metrics on /metrics + golden-signal Grafana dashboard (closes #124) (#129)

2026-07-24 08:31:41 +00:00

notification-sink.py

test(infra): verify-notifications smoke + CI job for the OZ→NRC path (refs #56)

2026-06-29 14:29:12 +02:00

objecten-check.py

S-18b · Objecten API up in compose, wired to Objecttypen (closes #140) (#143)

2026-07-27 09:53:01 +00:00

objecten-notifications-check.py

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

objecttypen-check.py

feat(infra): Objecttypen API up in compose with a seeded static token (closes #139) (#142)

2026-07-27 08:51:14 +00:00

playwright-summary.py

ci: richer step reports via Gitea 1.27 job summaries (closes #136) (#137)

2026-07-24 13:27:53 +00:00

registerrecord-check.py

S-18c · RegisterRecord objecttype defined + registered (closes #141) (#146)

2026-07-27 15:14:16 +00:00

run-acl-integration.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-bff-check.sh

ci(bff): compose wiring, verify-bff live check, mutation baseline (refs #8)

2026-07-01 11:15:05 +02:00

run-domain-check.sh

S-19a · ACL writes the RegisterRecord to Objecten on approval (closes #149) (#151)

2026-08-14 09:34:04 +00:00

run-e2e-check.sh

ci: richer step reports via Gitea 1.27 job summaries (closes #136) (#137)

2026-07-24 13:27:53 +00:00

run-integration.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-local-flow-check.sh

fix(infra): docker-compose.local self-seeds zaaktype, DMN + NRC abonnement (closes #110) (#114)

2026-07-22 12:44:29 +00:00

run-metrics-check.sh

feat(obs): Prometheus metrics on /metrics + golden-signal Grafana dashboard (closes #124) (#129)

2026-07-24 08:31:41 +00:00

run-notification-check.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

run-objecten-check.sh

S-18b · Objecten API up in compose, wired to Objecttypen (closes #140) (#143)

2026-07-27 09:53:01 +00:00

run-objecten-notifications-check.sh

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

run-objecttypen-check.sh

feat(infra): Objecttypen API up in compose with a seeded static token (closes #139) (#142)

2026-07-27 08:51:14 +00:00

run-observability-check.sh

feat(infra): observability backplane — Tempo + Prometheus + Grafana (S-16a, closes #122) (#125)

2026-07-23 12:26:22 +00:00

run-projection-check.sh

feat: read projection sourced from the register in Objecten (closes #153) (#155)

2026-09-01 07:26:33 +00:00

run-registerrecord-check.sh

S-18c · RegisterRecord objecttype defined + registered (closes #141) (#146)

2026-07-27 15:14:16 +00:00

run-tracing-check.sh

feat(obs): distributed traces across the .NET services (S-16b, closes #123) (#126)

2026-07-23 14:38:26 +00:00

seed-config.sh

S-18c · RegisterRecord objecttype defined + registered (closes #141) (#146)

2026-07-27 15:14:16 +00:00

tracing-check.py

fix(observability): stop single-binary Tempo evicting its only ingester (closes #156) (#157)

2026-09-01 08:31:36 +00:00

trx-summary.py

ci: richer step reports via Gitea 1.27 job summaries (closes #136) (#137)

2026-07-24 13:27:53 +00:00

verify-notification-driver.py

test(infra): verify-notifications smoke + CI job for the OZ→NRC path (refs #56)

2026-06-29 14:29:12 +02:00

verify-notifications.sh

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

vitest-summary.py

ci: richer step reports via Gitea 1.27 job summaries (closes #136) (#137)

2026-07-24 13:27:53 +00:00

wait-healthy.sh

feat: read projection sourced from the register in Objecten (closes #153) (#155)

2026-09-01 07:26:33 +00:00