M9-CredentialSecurity (0.0.9)

New Issue

Vault-based credential storage with OpenBao Transit encryption, PostgreSQL RLS enforcement, and user self-service credential management. See docs/design/credential-security.md

2026-04-26

100% Completed

Credential audit log viewer (stretch) p3 security web

#361 by jason.woltje was closed 2026-02-07 23:23:38 +00:00 0 / 5

Federation credential isolation api api p1 security

#360 by jason.woltje was closed 2026-02-07 23:01:15 +00:00 0 / 5

Encrypt LLM provider API keys in database api api p1 security

#359 by jason.woltje was closed 2026-02-07 22:50:40 +00:00 0 / 5

Build frontend credential management pages p1 security web

#358 by jason.woltje was closed 2026-02-07 23:01:13 +00:00

Add OpenBao to Docker Compose (turnkey setup) devops p1 security

#357 by jason.woltje was closed 2026-02-07 21:40:34 +00:00 0 / 6

Build credential CRUD API endpoints api api p1 security

#356 by jason.woltje was closed 2026-02-07 22:50:39 +00:00 0 / 10

Create UserCredential Prisma model with RLS policies database database p1 security

#355 by jason.woltje was closed 2026-02-07 22:39:43 +00:00

Write OpenBao documentation and production hardening guide p2 security

#354 by jason.woltje was closed 2026-02-07 22:16:55 +00:00 0 / 4

Create VaultService NestJS module for OpenBao Transit api api p1 security

#353 by jason.woltje was closed 2026-02-07 22:13:25 +00:00 0 / 8

Encrypt existing plaintext Account tokens api api p0 security

#352 by jason.woltje was closed 2026-02-07 19:17:09 +00:00 0 / 6

Create RLS context interceptor (fix SEC-API-4) api api p0 security

#351 by jason.woltje was closed 2026-02-07 18:26:18 +00:00 0 / 5

Add RLS policies to auth tables with FORCE enforcement database database p0 security

#350 by jason.woltje was closed 2026-02-07 18:49:41 +00:00 0 / 5

Security: Vault-based credential storage for agents and CI security

#346 by jason.woltje was closed 2026-02-07 23:23:40 +00:00