dorfteich/docs/vs-nfd
Claude Fable 5 0462f5702f #220: protocol of the isolated deployment run
Full deployment exercised in a compose stack whose networks are all
internal: true — setup, login, live collaboration, search, upload, all
export formats, backup and restore. tcpdump full capture on both
bridges: zero packets leave the isolated subnets; the only outbound
attempt the application makes is SMTP, which fails contained in the
outbox (5 retries, then FAILED) while the instance stays fully
functional. The restore finding became #288, fixed earlier in this
chain and re-verified in the same stack. Plan checkbox P1-3 and the
I-28 open question ticked; operations handbook airgap section updated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8
2026-07-31 17:04:43 +02:00
..
00-analyse-auftrag.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
10-ist-aufnahme.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
20-massnahmenplan.md #220: protocol of the isolated deployment run 2026-07-31 17:04:43 +02:00
30-issue-adr-auftrag.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
31-issue-entwurf.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
40-abgrenzungserklaerung.md #227: hardening guide with the VS-NfD reference configuration 2026-07-31 10:35:26 +02:00
50-haertungsleitfaden.md #217: map IdP groups and roles onto the permission model 2026-07-31 13:09:11 +02:00
60-sicherheitsdokumentation.md #215: trusted reverse-proxy header / mTLS client-certificate path 2026-07-31 12:50:09 +02:00
70-betriebshandbuch.md #220: protocol of the isolated deployment run 2026-07-31 17:04:43 +02:00
80-grundschutz-mapping.md #230: IT-Grundschutz mapping for APP.3.1 and CON.11.1 2026-07-31 10:35:26 +02:00
90-restrisiken.md #216: hard AUTH_LOCAL_ENABLED switch over every local credential flow 2026-07-31 12:58:07 +02:00
95-mirror-protokoll.md #218: mirror procedure into an internal registry 2026-07-31 14:33:04 +02:00
96-offline-build-protokoll.md #219: verified reproducible build without network access 2026-07-31 14:39:35 +02:00
97-isolationslauf-protokoll.md #220: protocol of the isolated deployment run 2026-07-31 17:04:43 +02:00