F34.us
Menu
ACTIVEPROJECT 13

SYSTEMS ENGINEERING RECORD

TotalAuth

Helps people and services sign in to Polinaria apps with the access they need. It handles identity setup without spreading powerful credentials across the system.

RoleIdentity platform architect and engineer

ImpactAutomated narrow identity lifecycles for browser apps, workloads, API resources, people, and collaboration without distributing administrator credentials.

  • Python
  • OIDC
  • ZITADEL
  • Zero Trust
  • Automation
  • Security

andrew Project record ·

TotalAuth: Narrow Doors for Shared Identity IMAGETotalAuth: Narrow Doors for Shared Identity

PROJECT README

README

TotalAuth turns identity integration into a reviewed platform capability rather than a collection of hand-managed client secrets.

It defines and automates browser and workload onboarding, human pilot lifecycle, application entitlements, Forgejo exchange, and constrained agent collaboration through narrow versioned contracts. TotalAuth owns identity protocol and credential boundaries while TotalInfra owns deployment and each application retains its own authorization decisions.

SYSTEM DOSSIER

Project signals

3 ITEMS · 2 CONNECTIONS

ARTICLE

TotalAuth: One Identity Plane, Many Deliberate Boundaries

An overview of browser, workload, resource, human, and collaboration identity boundaries.

FORGEJO / 26 WEEK ACTIVITY

TotalAuth repository

147 commits across 41 active days, 2026-05-11 through 2026-11-08 UTC.

WAKE / Recent activity

TotalAuth work log

  1. Artifact
    Created verified Forgejo upgrade and deployment tickets for every repository with an outdated deployed service.

    Seven application repositories now track deployment of their current dev revisions, and TotalInfra tracks the coordinated ZITADEL, TimescaleDB, Forgejo, Stalwart, and MariaDB upgrades with backup, migration, digest-pinning, rollback, and l…

  2. Deployed
    Removed the ZITADEL master key from container process arguments and deployed file-backed delivery.

    The unchanged production key is now read from a root-owned mode-0400 file; rendered Compose, Docker metadata, and live /proc command lines contain neither the credential nor unsafe master-key flags. ZITADEL, Forgejo, Home, Git-over-SSH, an…

Explore project progress in Wake

FORGEJO / REPOSITORY PULSE

TotalAuth repository

Commits
147
Files
92
Code bytes
717,480
Branches
26
Issues
9 open / 28 closed
Python
99.8%
Dockerfile
0.2%

ARTICLE

Trust Is a Series of Narrow Doors

A deep dive into bounded contracts, execution-context authentication, secret delivery, and collaboration exchange.

PROJECT TIMELINE

Activity

View all 3

The current overview mosaic features this collection’s latest evidence.

TECHNICAL RECORD

Documentation

View all 1

The current overview mosaic features this collection’s latest evidence.

VISUAL AND AUDIO RECORD

Media

View all 1

The current overview mosaic features this collection’s latest evidence.

COMPLETE PROJECT INDEX

All material

View all 3

The current overview mosaic features this collection’s latest evidence.

F34.us Background Image