HANDOFF.md and THREAT-MODEL.md now document the actual HMAC subject/ context identity, the shared RWX PVC with kubelet subPathExpr per-pod isolation and its exact boundary, the uid-10000 no-store-mount agent model, tmpfs transport key rotation, router X-Hux-* stripping, HUX-12 file-only evidence trust, staged-not-deployed status, and the verified SO-46/48 (open) and SO-53 (shipped) states. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
titan-iac
Flux-managed Kubernetes desired-state config for bstein.dev.
Canonical source URL:
ssh://git@scm.bstein.dev:2242/atlas/titan-iac.git
Scope
This repo contains cluster configuration consumed by Flux:
- platform/infrastructure manifests
- service manifests and kustomizations
- operational scripts for render/reconcile workflows
Apply model
I use Git + Flux as the source of truth and avoid manual in-cluster edits for durable changes.
Description
Languages
Python
74%
JavaScript
10.2%
Shell
6.2%
TypeScript
3.9%
Go
2.1%
Other
3.4%