Issues

• A board member downloads an online mandate as a PDF

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2101 · Filter by author ExtraToast opened on Oct 2, 2026

• An online mandate records how and when it was authorised, and seals the member's address with it

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2100 · Filter by author ExtraToast opened on Oct 2, 2026

• The backup looks after itself: the writer key rotates every 30 days and a weekly verify reads 5%

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2099 · Filter by author ExtraToast opened on Oct 2, 2026

• The Scaleway side of the backups is declared in OpenTofu

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2098 · Filter by author ExtraToast opened on Oct 2, 2026

• Vault's unseal shares are held by named people

  ready-for-humansecurity
  ESA-Blueshell/website#2097 · Filter by author ExtraToast opened on Oct 2, 2026

• The Scaleway backup organization exists, with two owners

  ready-for-humansecurity
  ESA-Blueshell/website#2096 · Filter by author ExtraToast opened on Oct 2, 2026

• Epic: Blueshell's data is backed up off-site to Scaleway, encrypted and locked against deletion

  epicsecurity
  ESA-Blueshell/website#2095 · Filter by author ExtraToast opened on Oct 2, 2026

• Listmonk's leftovers go from the cluster, DNS, Vault and the repository

  ready-for-agent
  ESA-Blueshell/website#2094 · Filter by author ExtraToast opened on Oct 2, 2026

• Stalwart, the api's uploaded files, Valkey and Gatus join the nightly backup

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2093 · Filter by author ExtraToast opened on Oct 2, 2026

• Bank details are wiped 13 months after the last collection or after erasure

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2092 · Filter by author ExtraToast opened on Oct 2, 2026

• A board member reveals a member's full IBAN, and every reveal and ING download is a security event

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2091 · Filter by author ExtraToast opened on Oct 2, 2026

• Bank details are sealed by Vault Transit, tied to their member

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2090 · Filter by author ExtraToast opened on Oct 2, 2026

• The plaintext address columns go

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2089 · Filter by author ExtraToast opened on Oct 2, 2026

• Sealed values move to the newest key version every night

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2088 · Filter by author ExtraToast opened on Oct 2, 2026

• Data is backed up nightly to Scaleway, MariaDB and Vault first

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2085 · Filter by author ExtraToast opened on Oct 2, 2026

• Personal details stay out of logs and recorded exceptions

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2084 · Filter by author ExtraToast opened on Oct 2, 2026

• Addresses are sealed by Vault Transit, tied to their member

  enhancementready-for-agentsecurity
  ESA-Blueshell/website#2083 · Filter by author ExtraToast opened on Oct 2, 2026

• Epic: private details are sealed by Vault Transit, so a leaked database reads as nothing

  epicsecurity
  ESA-Blueshell/website#2071 · Filter by author ExtraToast opened on Oct 1, 2026

• Epic: the board runs the association from Management

  epic
  ESA-Blueshell/website#2001 · Filter by author ExtraToast opened on Sep 30, 2026

• Kandi, the next board, has its own role, group and list until it takes office

  ready-for-agent
  ESA-Blueshell/website#1982 · Filter by author ExtraToast opened on Sep 29, 2026
  1

• The committee editor gains the board's platform sections, on both routes

  ready-for-agent
  ESA-Blueshell/website#1980 · Filter by author ExtraToast opened on Sep 29, 2026
  1

• A group's page sets its shared drives and their access, in Management

  ready-for-agent
  ESA-Blueshell/website#1977 · Filter by author ExtraToast opened on Sep 29, 2026

• Epic: content is managed with the site's own editors, extended for the board

  epic
  ESA-Blueshell/website#1937 · Filter by author ExtraToast opened on Sep 29, 2026

• Epic: incasso, from a member's mandate to ING's batch file

  epic
  ESA-Blueshell/website#1935 · Filter by author ExtraToast opened on Sep 29, 2026
  2

• Archiving a committee empties its group and takes its drive access away, and restoring reverses it

  ready-for-agent
  ESA-Blueshell/website#1926 · Filter by author ExtraToast opened on Sep 29, 2026