Joseph Doherty 591307c13e docs(secrets): production replication topologies decided — OtOpcUa Akka pair-local, ScadaBridge central gRPC hub (pull-only); scadaproj#3 ...

Design doc + runbook Production-enablement section + GAPS/index updates.
The previously-untracked production-KEK decision is now recorded: one
fleet-wide KEK via appsettings/env (never committed); ScadaBridge rejects
the SqlServer hub on topology grounds (sites talk to central, never the
DB) in favor of a new ZB.MOM.WW.Secrets.Replicator.Grpc package —
pull-only, updates originate at central only, by design.

Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1

2026-08-07 05:28:46 -04:00

..

2026-06-01-audit-component-design.md

docs: design for audit normalization component + ZB.MOM.WW.Audit

2026-06-01 06:32:39 -04:00

2026-06-01-deploy-zb-configuration-design.md

docs: record ZB.MOM.WW.Configuration fleet-wide adoption + add design/plan

2026-06-01 23:18:02 -04:00

2026-06-01-deploy-zb-configuration.md

docs: record ZB.MOM.WW.Configuration fleet-wide adoption + add design/plan

2026-06-01 23:18:02 -04:00

2026-06-01-deploy-zb-configuration.md.tasks.json

docs: record ZB.MOM.WW.Configuration fleet-wide adoption + add design/plan

2026-06-01 23:18:02 -04:00

2026-06-01-health-library-adoption-design.md

docs: design for ZB.MOM.WW.Health adoption across the 3 sister apps

2026-06-01 13:01:36 -04:00

2026-06-01-health-library-adoption.md

docs(health-plan): publish done; fix source-mapping (two patterns); note user-level creds

2026-06-01 13:23:46 -04:00

2026-06-01-health-library-adoption.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-health-observability-components-design.md

docs: design for health + observability normalization components

2026-06-01 06:08:51 -04:00

2026-06-01-telemetry-followons.md

docs: plan for ZB.MOM.WW.Telemetry follow-ons (A additive/hygiene, B metric normalization, C ScadaBridge instruments, D OTLP opt-in)

2026-06-01 16:32:57 -04:00

2026-06-01-telemetry-library-adoption-design.md

docs: design for ZB.MOM.WW.Telemetry adoption across the 3 sister apps

2026-06-01 15:11:50 -04:00

2026-06-01-telemetry-library-adoption.md

docs: implementation plan for ZB.MOM.WW.Telemetry adoption across the 3 sister apps

2026-06-01 15:24:28 -04:00

2026-06-01-telemetry-library-adoption.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-ui-theme-component-design.md

docs: add UI-theme component design

2026-06-01 04:29:58 -04:00

2026-06-01-zb-mom-ww-audit-shared-library.md

docs: implementation plan for ZB.MOM.WW.Audit shared library

2026-06-01 06:39:05 -04:00

2026-06-01-zb-mom-ww-audit-shared-library.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-zb-mom-ww-auth-shared-library.md

Initial commit: scadaproj umbrella — sister-project index, auth component normalization (design + GAPS), and the built ZB.MOM.WW.Auth shared library (0.1.0, flattened in).

2026-06-01 03:59:23 -04:00

2026-06-01-zb-mom-ww-auth-shared-library.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-zb-mom-ww-configuration-shared-library.md

plan(config): correct git layout — library committed to outer repo, no nested .git

2026-06-01 09:23:08 -04:00

2026-06-01-zb-mom-ww-configuration-shared-library.md.tasks.json

chore: mark configuration plan tasks complete

2026-06-01 09:56:01 -04:00

2026-06-01-zb-mom-ww-health-shared-library.md

docs: implementation plans for ZB.MOM.WW.Health + ZB.MOM.WW.Telemetry

2026-06-01 06:15:22 -04:00

2026-06-01-zb-mom-ww-health-shared-library.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-zb-mom-ww-telemetry-shared-library.md

docs: implementation plans for ZB.MOM.WW.Health + ZB.MOM.WW.Telemetry

2026-06-01 06:15:22 -04:00

2026-06-01-zb-mom-ww-telemetry-shared-library.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-01-zb-mom-ww-theme-shared-library.md

docs: add ZB.MOM.WW.Theme implementation plan (13 tasks)

2026-06-01 04:39:06 -04:00

2026-06-01-zb-mom-ww-theme-shared-library.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-02-auth-audit-normalization-design.md

docs: design for full Auth+Audit normalization across 3 sister projects

2026-06-02 00:04:33 -04:00

2026-06-02-auth-audit-normalization-phase1.md

plan(phase1): Tasks 1.5/1.6/1.7 done+reviewed — PHASE 1 COMPLETE across all 3 repos (claims/cookies, dev base DN dc=zb, canonical-six roles + SB SoD collapse + config-DB migrations); next = Phase 2 audit

2026-06-02 08:15:46 -04:00

2026-06-02-auth-audit-normalization-phase2-deep.md

plan: Task 2.5 (ScadaBridge audit full re-arch C1-C7) DONE+reviewed -> PHASE 2 COMPLETE (audit adopted across all 3 repos, deep/canonical, local-only). Next = Phase 3 Actor->principal wiring

2026-06-02 15:10:54 -04:00

2026-06-02-auth-audit-normalization.md

plan(phase2): Task 2.0 gate DONE — verified plan specs materially off (MxGw store moved to lib, OtOpcUa path dormant, SB rename structurally impossible); user chose DEEP adopt + pause; corrected deep design in -phase2-deep.md; PAUSED for review

2026-06-02 09:13:09 -04:00

2026-06-02-auth-audit-normalization.md.tasks.json

docs: PROGRAM COMPLETE — Auth+Audit normalization adopted across all 3 repos (Phases 0-3); mark exit-gate (CLAUDE.md Auth/Audit rows + components/{auth,audit}/GAPS.md adopted, local-only/not-pushed); tasks #10/#30/#31 done

2026-06-02 15:42:23 -04:00

2026-06-02-scadabridge-audit-rearch.md

plan: Task 2.5 (ScadaBridge audit full re-arch C1-C7) DONE+reviewed -> PHASE 2 COMPLETE (audit adopted across all 3 repos, deep/canonical, local-only). Next = Phase 3 Actor->principal wiring

2026-06-02 15:10:54 -04:00

2026-06-03-ui-theme-adoption-design.md

docs(ui-theme): approved adoption design (publish 0.2.0 + full canonical cutover across 3 apps)

2026-06-03 02:35:00 -04:00

2026-06-03-ui-theme-adoption.md

docs(ui-theme): implementation plan + task graph (26 tasks, Phases 0-4)

2026-06-03 02:50:31 -04:00

2026-06-03-ui-theme-adoption.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-06-04-shared-glauth-standardization-design.md

docs(glauth): mark shared-GLAuth design implemented + all plan tasks complete

2026-06-04 16:21:13 -04:00

2026-06-04-shared-glauth-standardization.md

feat(glauth): merged shared dev GLAuth directory + compose + runbook (10.100.0.35)

2026-06-04 15:45:41 -04:00

2026-06-04-shared-glauth-standardization.md.tasks.json

docs(glauth): mark shared-GLAuth design implemented + all plan tasks complete

2026-06-04 16:21:13 -04:00

2026-06-19-sphistorianclient-design.md

docs(sphistorianclient): approved design for ZB.MOM.WW.SPHistorianClient port

2026-06-19 05:29:51 -04:00

2026-06-19-sphistorianclient.md

docs(sphistorianclient): implementation plan + task tracking

2026-06-19 05:36:24 -04:00

2026-06-19-sphistorianclient.md.tasks.json

docs(sphistorianclient): document HISTORIAN_PORT env var; mark plan tasks complete

2026-06-19 06:09:43 -04:00

2026-06-23-historian-gateway-design.md

docs(historian-gateway): brainstormed design for ZB.MOM.WW.HistorianGateway sidecar

2026-06-23 19:31:54 -04:00

2026-06-23-historian-gateway-implementation.md

docs(historian-gateway): implementation plan + task ledger (31 tasks)

2026-06-23 19:43:08 -04:00

2026-06-23-historian-gateway-implementation.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-15-secrets-manager-design.md

docs(plans): ZB.MOM.WW.Secrets encrypted secrets manager design

2026-07-15 16:14:10 -04:00

2026-07-15-secrets-manager.md

docs(plans): ZB.MOM.WW.Secrets implementation plan (14 tasks)

2026-07-15 16:20:01 -04:00

2026-07-15-secrets-manager.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-16-secrets-adoption-design.md

docs(secrets): reconcile 0.2.1 adoption - what was proven vs merely built

2026-07-18 12:21:31 -04:00

2026-07-16-secrets-adoption-mxaccessgw.md

docs(secrets): reconcile 0.2.1 adoption - what was proven vs merely built

2026-07-18 12:21:31 -04:00

2026-07-16-secrets-adoption-mxaccessgw.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-16-secrets-adoption-otopcua.md

docs(secrets): reconcile 0.2.1 adoption - what was proven vs merely built

2026-07-18 12:21:31 -04:00

2026-07-16-secrets-adoption-otopcua.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-16-secrets-adoption-scadabridge.md

docs(secrets): reconcile 0.2.1 adoption - what was proven vs merely built

2026-07-18 12:21:31 -04:00

2026-07-16-secrets-adoption-scadabridge.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-17-localdb-design.md

docs(localdb): README + scadaproj index row + design-doc deltas; pack-verified 3 nupkgs @ 0.1.0

2026-07-18 01:12:19 -04:00

2026-07-17-localdb-implementation.md

fix(localdb): DI review fixes — onReady leak guard, BusyTimeoutMs ctor guard, shared allow-list

2026-07-17 21:47:28 -04:00

2026-07-17-localdb-implementation.md.tasks.json

docs(localdb): mark all 15 plan tasks completed

2026-07-18 01:20:29 -04:00

2026-07-17-secrets-g7-clustered-replication-design.md

feat(secrets): cluster replication via SQL Server and Akka.NET (G-7, 0.2.0)

2026-07-18 04:08:23 -04:00

2026-07-17-secrets-g7-sqlserver-store.md

feat(secrets): cluster replication via SQL Server and Akka.NET (G-7, 0.2.0)

2026-07-18 04:08:23 -04:00

2026-07-17-secrets-g7-sqlserver-store.md.tasks.json

feat(secrets): cluster replication via SQL Server and Akka.NET (G-7, 0.2.0)

2026-07-18 04:08:23 -04:00

2026-07-18-secrets-0.2.0-upgrade-and-clustering.md

docs(secrets): reconcile 0.2.1 adoption - what was proven vs merely built

2026-07-18 12:21:31 -04:00

2026-07-18-secrets-0.2.0-upgrade-and-clustering.md.tasks.json

docs(secrets): live convergence gate results - SQL hub PASSES 6/6, Akka FAILS

2026-07-18 13:50:35 -04:00

2026-07-19-scadabridge-localdb-design.md

docs(localdb): ScadaBridge LocalDb adoption design (approved)

2026-07-19 01:52:48 -04:00

2026-07-19-secrets-interactive-cli-design.md

docs(secrets): interactive CLI console design (approved)

2026-07-19 08:41:41 -04:00

2026-07-19-secrets-interactive-cli.md

docs(secrets): interactive console implementation plan (14 tasks)

2026-07-19 08:46:15 -04:00

2026-07-19-secrets-interactive-cli.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-20-otopcua-localdb-design.md

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-22-initjoin-selfform-fallback.md

docs: correct the self-form watchdog record — rejected, not shipped

2026-08-01 11:09:45 -04:00

2026-07-22-initjoin-selfform-fallback.md.tasks.json

docs: truth sweep — index + component GAPS reconciled with shipped state (Health 0.3.0 merged both apps, OtOpcUa LocalDb Phase 2 executed, Auth 0.1.5, Secrets 0.2.3/0.3.0)

2026-08-07 02:00:58 -04:00

2026-07-22-overview-dashboard-design.md

docs(overview): family overview dashboard — options, design, impl plan, mockup

2026-07-22 09:22:13 -04:00

2026-07-22-overview-dashboard-impl-plan.md

docs(overview): family overview dashboard — options, design, impl plan, mockup

2026-07-22 09:22:13 -04:00

2026-07-22-overview-dashboard-impl-plan.md.tasks.json

docs(overview): Phase 4 check 1 now passes for both products (lmxopcua#494 closed)

2026-07-24 12:46:05 -04:00

2026-08-07-secrets-production-topology-and-grpc-hub.md

docs(secrets): production replication topologies decided — OtOpcUa Akka pair-local, ScadaBridge central gRPC hub (pull-only); scadaproj#3

2026-08-07 05:28:46 -04:00