Improve VPN status reporting and recovery

This commit is contained in:
2026-10-13 06:53:52 +03:00
parent fdb15ae462
commit 7a716b4c9c
188 changed files with 6953 additions and 1911 deletions
+13
View File
@@ -0,0 +1,13 @@
# Goal: Two Auth Modes
Use Krypton Execution to execute `docs/goals/two-auth-modes/PLAN.md`.
Core rules:
- Treat PLAN.md as the source plan.
- Preserve intent, ownership, contract, cutover, evidence, and kill criteria.
- Keep exactly two public modes: `manual-keychain` and `bitwarden-auto`.
- Do not introduce a third first-class user mode; old flags/env may exist only as compatibility shims mapped to one of the two modes.
- Manual-keychain stores only LDAP username/password in macOS Keychain and always leaves OTP manual.
- Bitwarden-auto preserves the old personal Bitwarden + Touch ID + full autofill/submit path.
- Capture acceptance evidence from both checkout source and installed local paths.
- Say "implemented but unproven" if installed-path or launch evidence cannot be captured.