Advanced Search
Search Results
1214 total results found
Bilko Authentication -- Entra External ID (CIAM)
Overview Bilko uses Microsoft Entra External ID (CIAM) as its sole identity provider. Entra authenticates users; Bilko authorises them. Roles and permissions live exclusively in the Bilko database — no role claims are read from Entra tokens. Decision anchor (A...
Bilko RBAC -- Users / Roles / Permissions
Overview Bilko uses a flat RBAC model: users have one role per organisation; roles map to a permission catalog via a DB seed table. Permission resolution is live from the database on every request (no JWT role claim for authorisation). The system was built in ...
Bilko Auth Migration Runbook + Admin Guide
Scope This runbook covers: (1) how an operator bootstraps the first admin after legacy auth is retired, (2) how an admin creates and invites users, (3) how to assign and change roles, (4) the full user lifecycle via Entra, (5) migration notes from the WP1–WP4 ...
ADR-037 -- Entra Authenticates, Bilko Authorises; Single-Role v1; Multi-Org Deferred
ADR-037 — Entra Authenticates, Bilko Authorises; Single-Role v1; Multi-Org Deferred FieldValue ADR numberADR-037 Date2026-06-08 StatusAccepted AuthorJohn (AI Director, ALAI Holding AS) CEO decisionAlem Basic — confirmed 2026-06-07 (CEO resolution addendum, ...
ALAI Mail Topology — Migadu Domains, Mailbox Inventory, John's 19-Account Ingest Loop (2026-06-08)
ALAI Mail Topology & John's Email Ingest Loop Last updated: 2026-06-08 (v2 — 19 accounts, daemon-path docs, himalaya touch-points) | MC: #103182 | Built by: FlowForge | Validated by: Proveo (Angie Jones) — PASS 1. Mail Infrastructure — Migadu (Single ...
Bilko Environment Topology — Corrected Canonical Reference (2026-06-09)
Bilko Environment Topology — Corrected Canonical Reference As of: 2026-06-09 | Authority: MC #103300 C7 (ZAKON PLAN docs) | Source: Tool-verified facts only — no inferred data 1. Production — Customer-Facing CEO Decision (2026-06-09): Demo Cloud Run service...
Bilko Infrastruktura — objašnjeno jednostavno (za CEO) — 2026-06-09
Bilko Infrastruktura — objašnjeno jednostavno (za CEO) Verzija 2026-06-09. Cilj: da za 5 minuta razumiješ gdje Bilko živi, kako kod dođe do kupaca, šta je polomljeno i kako to zaobilazimo. Sve provjereno uživo (gcloud), ne napamet. KORAK 1 — Šta gdje radi (...
Bilko Backoffice — Backend MVP (Sentry + audit request_id + support_tickets)
1. Overview This backend slice (MC #103323, branch feat/103323-backoffice-backend, commit 6b214a00, PR #316) delivers the diagnostic and intake backbone for the Bilko support fix-loop. Before this slice, when a customer hit an accounting error on ap...
Bilko Observability (GCP-native) 2026-06-10
Status LIVE and Proveo-verified as of 2026-06-10. GCP project tribal-sign-487920-k0, region europe-north1. MC #103329 (FlowForge implementation) + MC #103331 (Proveo independent verification). Parent MC #103328. Related: Bilko Sentinel — Tier-0 Self-Healing A...
Bilko Sentinel — Tier-0 Self-Healing Agent 2026-06-10
Status LIVE and Proveo-verified as of 2026-06-10. MC #103337 (AgentForge implementation) + MC #103337 Proveo independent verification. Parent MC #103328. Dynamic policy discovery added MC #103420 (2026-06-11). Related: Bilko Observability (GCP-native) 2026-06-...
Bilko Backoffice — Ops Infra (Logging Views + support@ Forwarding + Preflight)
Bilko Backoffice — Ops Infra (MC #103325) Branch: feat/103325-backoffice-infra | PR: #317 | Proveo verdict: PASS (2026-06-10) | Sibling: Backoffice Backend MVP (page 3100) 1. Cloud Logging Saved Views GCP project: tribal-sign-487920-k0 Bucket: _Default (g...
Bilko Prod Topology — app.bilko.cloud Cutover (reuse-demo-as-prod)
Bilko Prod Topology — app.bilko.cloud Cutover (reuse-demo-as-prod) MC: #103300 | Completed: 2026-06-10 | Proveo verdict: CUTOVER PASS | Evidence root: /tmp/evidence-103300/ CRITICAL REFERENCE — do not make assumptions about which DB is prod or what da...
SEO Portal Path C — Delegated Service-Account GSC/GA via Workload Identity Federation (MC #103390)
Overview MC #103390 — SEO Readiness Portal Path C replaces the blocked per-client Google OAuth flow with a delegated read-only service account authenticated via Workload Identity Federation (WIF). No static JSON key is created or stored; the portal au...
Bilko Sentinel — Tier-1 Bounded Auto-Remediation (Shadow-First) 2026-06-11
Status BUILT — SHADOW mode. MC #103435 (AgentForge build) + MC #103436 (Securion adversarial review). Parent MC #103328. Module: /Users/makinja/system/tools/bilko-sentinel-tier1.js. Tier-0 remains the active detection layer; Tier-1 is shadow-calibrating only. ...
LumisCare Wave-1 Durability Redeploy & Validation — 2026-06-11
LumisCare Wave-1 Durability Redeploy & Validation — 2026-06-11 Scope MC #103376 / parent #103260: prove Wave-1 live artifacts are durable after merge to dev, rebuilt and redeployed from merged dev, then independently validated. Source and live artifacts Sourc...
Bilko HR eRačun — sveRačun (PostLink) Integration & Status Model
OverviewProvider: sveRačun by PostLink d.o.o. (Velika Gorica, HR).Contact: David Krišto [email protected], Ivan Jurić [email protected] docs: https://sveracun-public-api.redocly.app/Replaces the abandoned Storecove plan (MC #8675, not approved)...
Bilko Security & Engineering Decisions (Observability Program)
Bilko Security & Engineering Decisions (Observability Program) This page covers security findings, live fixes, engineering decisions, and arming prerequisites for the Bilko observability/self-healing program. It is a companion to the Program Overview (MC #103...
Lessons Learned
Lessons Learned — Accumulated Knowledge 2026-04-04: P0 Endpoint Hallucination — LightRAG /upload vs /documents/text Problem: Builder agent hallucinated /upload endpoint for LightRAG when correct endpoint is /documents/text. Error passed through entire system ...