4 docs tagged with "incident-response"

The Ansible vault password was available to PR-controlled workflow code, creating a path for any contributor to exfiltrate the credential that unlocks every secret in TheBurrow.

Playbooks, escalation notes, and operational response guidance.

Step-CA failed to initialize after vault_edit.py wrote a Python dict string representation instead of valid JSON for the JWK encryptedKey field in ca.json, breaking CA initialization fleet-wide.

During the Ansible vault restructure into per-service files, changes were committed directly to main, bypassing all CI gates and violating the branch protection governance workflow.