Appearance
Ariadne / Theseus operator actions
Last updated: 11 September 2026 (setup pass)
Single checklist of human / portal / secret-store steps for Ariadne and Theseus. The inventory and roadmap remain the source for what the work items are. This log is what a person still owes.
Do not put passwords, .p12, .p8, keystores, mobile keys, Theseus field tokens, or ntfy tokens in this file or in git. Record only where they live (secret store / keychain / portal / lab machine).
Statuses: blocking (a named GitLab close is waiting), pending (owed, not currently blocking repo work), later (named so it is not forgotten), done (verified).
How-to for the shared Wantok secret store: Keryx secret store, NAS unlock. Do not invent a second store.
Blocking now
None. Setup created GitLab items only. No work-item close is waiting on a portal or secret-store step until A5 / T2 / T4 start.
Pending
| Id | Status | Linked item | What is owed | Where it lives (not the secret) |
|---|---|---|---|---|
| OA-AT-maps | pending | A5 / #148 (needs A4 / #147) | Copy CEDR and/or Multiscan floor rasters from the Hansel archive onto a lab SafeCall install. Run the A4 importer against project.json on that box. Do not commit maps or mar.json. | Archive: /Users/tmin/Code/archive/old_safecall_files/legacy/hansel/back/projects/AKESO-CEDR/images/ and server/projects/AKESO-CEDR/. Lab install maps directory — not git. |
| OA-AT-unlock | pending | T2 / #151 | Place Wantok layer-1 unlock material (allowlist / hashed secrets) in the approved secret store after T2 names the format. | Secret store path to be recorded when T2 lands. Never in the Theseus tree. |
| OA-AT-ops | pending | T4 / #153 | Record where Theseus’s subscribe credential for safecall-ops (or {binary_name}-ops) lives. Publish path stays server-side (server_ntfy_ops_*). | Secret store / ntfy token manager. Not a Keryx QR. |
Later
| Id | Status | What |
|---|---|---|
| OA-AT-store-ids | later | Decide Ariadne application / bundle ids. A1 must not claim cz.wantok.ariadne. |
| OA-AT-internal-dist | later | Theseus internal distribution (sideload / TestFlight / Play Internal). No public-store program in this phase. |
| OA-AT-hansel-mac-qr | later | Hansel printed-MAC / holder deploy wizard — not the walk-around confirm flow. |
Done
| Id | Status | What |
|---|---|---|
| OA-AT-setup | done | Inventory, this log, GitLab labels / milestones / work items created 11 September 2026. Parents #143 and #149. |