Runbooks
Runbooks are added as each component ships. Rows without a link are planned:
| Runbook | Phase |
|---|---|
| Worker enrollment and join tokens | 1 ✅ |
| Rotating a CA key | not scheduled |
| Locking a user and ending a session | 3.5 ✅ |
| Web console | 3.5 ✅ |
| CI runners and which jobs run | CI ✅ |
| Publishing the website (GitHub Pages) | Docs ✅ (off until the repository is public) |
SSH target onboarding (TrustedUserCAKeys) |
2 ✅ |
| Audit pipeline backlog / spool full | 3 ✅ |
| Releasing | ADR-0024; first release pending |
| Scaling out, replacing, and upgrading copies | 5 ✅ |
| Verifying the audit hash chain | 3 ✅ |
| Onboarding a database; role bootstrap and drift | 6 ✅ |
| Onboarding MongoDB, Atlas, or DocumentDB | 9 ✅ |
| Access requests, search, discovery, reviews, and watching | 13 ✅ |
| Control plane outage | not scheduled |
| Okta setup | 15 |