chore: bootstrap lean sysadmin-chronicles repo

Import the runnable game code, content, docs, scripts, and repo guidance while leaving local agent state, dependency installs, build output, and backup copies out of the published tree.
2026-05-02 11:49:07 -04:00
commit 0265afa054
252 changed files with 37574 additions and 0 deletions
@@ -0,0 +1,8 @@
+{
+  "_description": "Named access level definitions. Derived from ProgressionSystem unlocked_access keys.",
+  "levels": [
+    { "name": "basic_user", "description": "Default access. Workstation only. No sudo." },
+    { "name": "sudo", "description": "Sudo on workstation; SSH to hermes or vulcan." },
+    { "name": "root", "description": "Full sudo on at least one remote host." }
+  ]
+}
@@ -0,0 +1,54 @@
+[
+  {
+    "id": "unlock:workstation:sudo:basic",
+    "description": "Basic sudo access on the workstation (systemctl, journalctl, df)",
+    "trust_threshold": 50.0,
+    "revokes_below_trust": -1,
+    "grants_access": ["sudo:workstation:systemctl", "sudo:workstation:journalctl", "sudo:workstation:df"],
+    "grants_vms": [],
+    "grants_docs": ["onboarding"],
+    "revokes": []
+  },
+  {
+    "id": "unlock:web_server:access",
+    "description": "Access to the web server (hermes) via SSH from workstation",
+    "trust_threshold": 55.0,
+    "revokes_below_trust": 45.0,
+    "grants_access": ["ssh:web_server", "sudo:web_server:systemctl", "sudo:web_server:nginx"],
+    "grants_vms": ["web_server"],
+    "grants_docs": ["nginx-runbook", "web-deploy-guide"],
+    "revokes_vms": ["web_server"],
+    "revokes": ["ssh:web_server", "sudo:web_server:systemctl", "sudo:web_server:nginx"]
+  },
+  {
+    "id": "unlock:web_server:sudo:full",
+    "description": "Full sudo on hermes — enables root-level fixes",
+    "trust_threshold": 60.0,
+    "revokes_below_trust": 45.0,
+    "grants_access": ["sudo:web_server:full"],
+    "grants_vms": [],
+    "grants_docs": ["server-admin-guide"],
+    "revokes": ["sudo:web_server:full"]
+  },
+  {
+    "id": "unlock:build_machine:access",
+    "description": "Access to the build machine (vulcan)",
+    "trust_threshold": 60.0,
+    "revokes_below_trust": 50.0,
+    "grants_access": ["ssh:build_machine", "sudo:build_machine:pacman"],
+    "grants_vms": ["build_machine"],
+    "grants_docs": ["arch-runbook", "package-mirror-guide"],
+    "revokes_vms": ["build_machine"],
+    "revokes": ["ssh:build_machine", "sudo:build_machine:pacman"]
+  },
+  {
+    "id": "unlock:incident:visibility",
+    "description": "Incident alerts shown in HUD — player trusted enough to see system pressure",
+    "trust_threshold": 55.0,
+    "revokes_below_trust": -1,
+    "grants_access": ["hud:incident_alerts"],
+    "grants_vms": [],
+    "grants_docs": ["incident-response-guide"],
+    "revokes": []
+  }
+]