Yaojia Wang 31054450fc docs: zero-touch tunnel enrollment automation plan (research + 3-track design + cross-validation) ...

Multi-agent plan (11 agents, 70 web sources): fully automate cert enrollment so
customers never handle certs/keys. Chosen: authenticated-CSR REST (k8s TLS-bootstrap
model) + RFC 8628 device grant for host bootstrap; hardware keygen (Secure Enclave /
Android Keystore) + CSR for clients; Model-A→B via dNSName-SAN==Host binding at nginx
:8470 (njs) + per-tenant name-constrained intermediate CAs; short-lived certs + passive
revocation. Reuses control-plane CA, S2 install tooling, iOS ClientTLS.

2026-07-08 18:57:19 +02:00

..

mockups

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00

ANDROID_CLIENT_PLAN.md

docs(android-plan): lock user decisions R1 (accept best-effort FCM) + R7 (use google-auth-library)

2026-07-08 11:38:38 +02:00

ARCHITECTURE.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

DEPLOY_RELAY.md

docs(relay): deployment build & ops plan (DEPLOY_RELAY.md)

2026-07-03 14:16:30 +02:00

DESKTOP_PLAN.md

feat(desktop): Electron all-in-one desktop shell (Mac/Windows) embedding the server

2026-07-02 06:13:17 +02:00

DISPATCH.md

build: adopt esbuild for frontend bundling (build:web → public/build/)

2026-06-16 07:36:01 +02:00

EXPLORE_RELAY_SERVICE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

EXPLORE_REMOTE_ACCESS.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

FEATURE_PROJECT_MANAGER.md

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00

FEATURE_WALKAWAY_WORKBENCH.md

docs(v0.7): PRD + implementation plan for Walk-away Workbench (Band A + B)

2026-06-30 15:51:58 +02:00

PLAN_IOS_CLIENT.md

feat(ios): W1 leaf packages — ReconnectMachine/PingScheduler, GateState/AwayDigest, HostRegistry, APIClient+pairing probe

2026-07-04 21:53:41 +02:00

PLAN_IOS_IPAD.md

feat(ipad): T-iPad-1 — device family [1,2] + iPad orientations + CI leg

2026-07-05 18:29:30 +02:00

PLAN_NATIVE_TUNNEL.md

docs: multi-tenant mTLS reverse-tunnel dev plan (VPS + server + native clients)

2026-07-07 08:00:40 +02:00

PLAN_RELAY_AGENT.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_AUTH_ISOLATION.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_CONTROLPLANE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_E2E.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_FRONTEND.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_INDEX.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_PHASE1.md

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

PLAN_RELAY_RECONCILE.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_RELAY_RUN_PHASE0.md

feat(relay-run): Phase 0 single-host relay — real data-plane wiring + integration test

2026-07-04 14:13:04 +02:00

PLAN_RELAY_TRANSPORT.md

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

PLAN_TUNNEL_AUTOMATION.md

docs: zero-touch tunnel enrollment automation plan (research + 3-track design + cross-validation)

2026-07-08 18:57:19 +02:00

PLAN_VOICE_COMMANDS.md

feat: voice command mapping — context-gated approve/reject over voice

2026-07-01 10:38:32 +02:00

PLAN_WALKAWAY_WORKBENCH.md

docs(v0.7): PRD + implementation plan for Walk-away Workbench (Band A + B)

2026-06-30 15:51:58 +02:00

PLAN.md

build: adopt esbuild for frontend bundling (build:web → public/build/)

2026-06-16 07:36:01 +02:00

PROGRESS_LOG.md

docs(progress): log Android client AW0+AW1 pure-Kotlin foundation (218 tests green)

2026-07-08 13:45:54 +02:00

REVIEW_RELAY_SECURITY.md

docs(relay): security audit report + progress log for the relay findings

2026-07-02 16:41:19 +02:00

REVIEW_REPORT.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

TECH_DOC.md

fix: address review report across security, architecture, quality, tests

2026-06-20 18:27:45 +02:00

THEME.md

chore(v0.6): checkpoint foundation — Amber theme, P1 types, P3 config, design docs

2026-06-30 10:05:40 +02:00