What we have on disk, and why. Paths under /root/realcube/coalition-x/ unless noted. Secrets stay in .secrets/ — not listed with values.
| File | Why |
|---|---|
| 20125_signme-api-java-2.8-9510.zip use | Official Java SDK we integrate. Unpacked in lab vendor/signme-api-java-2.8-9510/. |
| 20124_signme-api-java-2.8-9500-*.zip ref | Older Java. Keep for diff only — do not start from this. |
| 20123 / 20122 signme-api-cs-*.zip ref | C# SDKs. Not our path (Node + Java sidecar). |
| 20128 / 20126 NEUERUNGEN …9510 EN/DE.pdf | Release notes for the version we ship. |
| 20127 / 20129 NEUERUNGEN …9500 EN/DE.pdf ref | Notes for the older API. |
| 20121_TestRoot_TestCA_*.zip | Sandbox trust anchors for chain verify. Extracted to vendor/test-roots/. |
| 20130_*_shad_*.zip secret | Partner Shadow access blob. Password-locked. Needed for live SOAP — do not commit or paste. |
| 20300_…Estimation.pdf + estimation.txt | Armando’s day split / onboarding + sealing steps. Local text mirror for search. |
| 20407_Screenshot …152326.png | Sequence sketch: SP (P12) ↔ Trust ↔ D-Trust. 5 min challenge window. |
| 20418_…PMO…Gemini.pdf | 29 Sep PMO notes. Org seal mandatory. |
| CX-68/README.md | Index of the attachments above. |
| File | Why |
|---|---|
| lab/STAGES.md | Ordered work stages for us. |
| lab/dtrust-sandbox/README.md | How to run the Java lab. |
| lab/dtrust-sandbox/sandbox/MockPipeline.java + run.sh | Offline hash → mock seal → verify. No network, no P12. |
| vendor/signme-api-java-2.8-9510/ SDK | Built jar, WSDL, samples. Live spike = DigestSealingQualifiedSample. |
| …/doc/SignMeApiV2.pdf + xlsx | API contract, error codes, HTTP statuses. |
| …/src/test/config/*.p12 expired | Sample Q-SEAL second factor. Format reference only (expired 2025-02). |
| …/src/test/config/signme-samples.properties | Where partner URL + basic-auth go for samples. |
| vendor/test-roots/*.cer | Test CA / Root for verifier trust list in sandbox. |
| docs/briefing-nightshift-2026-10-20.md | Architecture + CX-71…81 plan (Governify v0.8). |
| .secrets/bdr-portal.env secret | BDR support portal login (gitignored). |
| .secrets/bdr-portal-notes.md | What the portal showed after login (Zugangsdaten empty). |
| File | Why |
|---|---|
| aws-stackit-2026-10-20/ARCHITECTURE.md | Named CX AWS pieces (Exchange, Trust, Erfassung, Verify). |
| …/Realcube_CoalitionX_AWS_resources_costs_*.xlsx | Cost sheet for Iurii / StackIT talk. |
| …/SLACK_FOR_IURII.md | Paste-ready Slack text. |
| URL | Why |
|---|---|
| cx.koveh.com/map/ | Interactive sealing path (corrected architecture). |
| …/map/kpis.json | 29 EnergyhouseWise KPI codes + EN/DE + order/station explainers. |
| cx.koveh.com/files/ | This inventory. |
| work…/coalition-x-dtrust/ | Internal plan + Jira CX map (auth). |
| work…/coalition-x-aws/ | AWS cost hub (auth). |
| File | Why |
|---|---|
| /root/realcube/meetings/2026-10-19-iurii-coalition-x-dtrust.md | Decisions with Iurii (Java first, Hetzner, P12 role). |
Vendor tree under generated-sources/ and target/ is build output — use the jar, not those files by hand.