Changelog

What changed in the Bedrock Cybersecurity documentation — newest first. Generated from git history by scripts/gen-changelog.ts.

June 2026

• 2026-06-20 — feat(ui): theme polish, responsive, a11y focus states + OG/social meta (#165)
• 2026-06-20 — feat(ui): commercial landing + brand design tokens; clear Dependabot esbuild noise (#163)
• 2026-06-20 — chore: rebrand stale cirius-soc repo refs to bedrock-soc in docs (#160)
• 2026-06-20 — rename: code-scanner → bedrock-scanner (wordmark provenance comment) (#161)
• 2026-06-20 — docs: finish infrastructure-docs → bedrock-docs rename (reference cleanup) (#162)
• 2026-06-20 — docs: rename cirius-secops repo refs → bedrock-hub (#159)
• 2026-06-20 — Update qualified repo references to bedrock-* names (#158)
• 2026-06-20 — docs(rename): update org repo names to bedrock-* in runbooks (#157)
• 2026-06-15 — fix(ci): scope npm audit to production deps (--omit=dev) (#156)
• 2026-06-14 — docs: favicon + hero de-dup (dropped by #153 squash) (#154)
• 2026-06-14 — docs: two-row Bedrock masthead matching the other apps (#153)
• 2026-06-14 — fix(ci-security): add least-privilege workflow permissions (#152)
• 2026-06-14 — Standardize masthead: granite Bedrock Cybersecurity logo (VitePress) (#151)
• 2026-06-14 — docs: Bedrock Cybersecurity header — rename + secops typography (#149)
• 2026-06-14 — docs: document Bedrock (MSSP) vs Cirius Group (customer) entity model (#148)
• 2026-06-10 — scripts: add Set-GpoRemediations.ps1 (RDP saved passwords + MDE passive) (#147)
• 2026-06-10 — scripts: add Set-MDEPassiveMode.ps1 GPO enforcement + runbook section (#146)
• 2026-06-10 — docs: review leftovers — proposed DR/tabletop dates, Veeam rebuild notes, README catch-up index (#143)
• 2026-06-10 — ci: fix silent auto-merge no-op; daily deploy sweep for missed push events (#140)
• 2026-06-09 — docs: rebase network topology + agent inventory from IaC/code (closes #138) (#142)
• 2026-06-09 — docs: rewrite SOC API reference from cirius-soc source (closes #135) (#141)
• 2026-06-09 — docs: fix four dangerous wrong-target facts (DR bucket, DC names, hunt KQL) (#139)
• 2026-06-10 — docs: correct retired job names to consolidated *-cirius jobs (#134)
• 2026-06-09 — docs: fix 6 dead links, enable dead-link build gate (#133)
• 2026-06-09 — docs: site refresh — SOC platform links, self-generating sidebar, freshness dates (#132)
• 2026-06-05 — fix(security): SHA-pin oven-sh/setup-bun in all workflows (#127)

May 2026

• 2026-05-27 — ci: reroute findings to soc.bedrockcybersecurity.org (#124)
• 2026-05-27 — docs: dashboard landing page + workflow logging + SecOps wiring (#123)
• 2026-05-27 — ops: remove mis-homed workflows and orphaned scripts (#122)
• 2026-05-25 — docs: 5 additional guides — auditd, ransomware IR, unmanaged device detection, GHA security, pgaudit ops (#121)
• 2026-05-25 — docs: 18 new guides — HIPAA, UBA, kill chain response, and operational runbooks (#120)
• 2026-05-25 — fix(ci): generate package-lock.json before npm audit (#119)
• 2026-05-25 — docs: add 8 runbooks — kill chain Phase 2, UBA, FIM, pgaudit, DCR/AMA, agent troubleshooting, AWS Audit Manager, Entra PIM (#118)
• 2026-05-25 — kobe: Kobe completed work (#114)
• 2026-05-25 — kobe: Kobe completed work (#112)
• 2026-05-25 — docs: add 7 runbooks — kill chain Phase 1, Twingate certs, Terraform state, SecOps CM, MDE passive mode, Veeam, Azure Monitor (#113)
• 2026-05-25 — Kobe: Kobe completed work (#109)
• 2026-05-25 — Kobe: Seven of twelve files written — three agents still running, committing t (#110)
• 2026-05-25 — docs: 10 new guides — kill chain dev, Cloud PC, orchestrator split, known-good rules, SecOps API, canary response, M365 DLP, hunt playbooks 002-004 (#111)
• 2026-05-25 — kobe: Three of twelve files written so far; waiting on remaining agents before committing the batch PR. (#108)
• 2026-05-25 — docs: add 9 runbooks — network troubleshooting, Key Vault workflow, DDE ops, AWS IAM IC, Azure Policy, PostgreSQL, kill chain IR, Azure OpenAI, employee onboarding (#107)
• 2026-05-25 — docs: infrastructure runbooks batch — 13 new guides + CI fixes (#106)
• 2026-05-25 — fix(ci): add PR Check job + remove CODEOWNERS for automated merges (#105)
• 2026-05-23 — ci: add scanner gate, build validation, and CM ingest (#72)
• 2026-05-22 — fix(ci): pin wrangler-action to v4.0.0 SHA (#71)
• 2026-05-22 — ci: restore Cloudflare Pages deploy workflow (#70)
• 2026-05-22 — feat(ci): add baseline scan and auto-merge workflow (#69)
• 2026-05-20 — remove deploy-docs workflow — Cloudflare Pages GitHub integration handles deploy (#68)

April 2026

• 2026-04-27 — ci + deps: GHA optimization + dep bumps (trivy, checkov, setup-node) (#65)
• 2026-04-26 — ci: add security-scan workflow (Trivy v0.36.0, framework=all) (#61)
• 2026-04-26 — docs: mega PR — merge all 26 open documentation and CI branches (#60)
• 2026-04-26 — ci: add security-scan workflow (Trivy v0.36.0, framework=all) (#59)
• 2026-04-15 — docs: consolidated docs sprint — 19 PRs merged (PRs #13–31) (#32)

March 2026

• 2026-03-29 — docs: add Microsoft-SecurityEvent DCR Sentinel requirement to known gotchas (#12)
• 2026-03-29 — docs: add GPO and Intune deployment scripts for kill chain audit policy (#11)
• 2026-03-28 — docs: kill chain audit policy — GPO and Intune runbook (#10)
• 2026-03-28 — docs: add Kobe operating instructions CLAUDE.md
• 2026-03-22 — kobe: Three clean edits applied — Maester, cost reporting rows, and DDE trust claim documented.
• 2026-03-22 — kobe: Kobe completed work
• 2026-03-19 — chore: add Kobe instructions for Claude Code assistant
• 2026-03-13 — folder
• 2026-03-13 — March 13th update
• 2026-03-11 — docs: update runbooks and add ops-automation, alerting, palo-alto docs
• 2026-03-03 — Add PR validation workflow for required status checks
• 2026-03-03 — Add PR validation workflow for status checks
• 2026-03-03 — Add CODEOWNERS file for audit compliance
• 2026-03-03 — Add CODEOWNERS file for audit compliance
• 2026-03-02 — march2nd
• 2026-03-02 — logging
• 2026-03-02 — Fix documentation audit findings and add logging architecture

February 2026

• 2026-02-24 — structure
• 2026-02-24 — Initial commit