install wardrowbe on orion

docs/current-work.md

@@ -18,6 +18,25 @@ Keep this record current by replacing superseded state. Pass-specific procedures
 stay here, not in AGENTS. The user must agree before the overall pass is complete.
 The unedited `~/sync/notes/setup-todo.md` remains an idea inbox, not authorization.
 
+## Wardrowbe on Orion: implemented, awaiting provisioning and activation
+
+- Orion selects the Wardrowbe capability at `wardrobe.jelles.net`, with Tinyauth
+  password access at `wardrobe-auth.jelles.net`. Trusted household members select
+  their profile through Wardrowbe's development login after the gateway; profile
+  identity is not independently verified.
+- Podman containers use immutable image digests, a dedicated network and persistent
+  named volumes. Database/queue health gates migrations and API startup; frontend
+  and workers wait for the API. Caddy protects all application routes; published
+  container ports are localhost-only. Internal AI is disabled everywhere. No
+  Codex bridge, Ollama or paid provider is configured.
+- Four new system SOPS keys and both DNS records remain user-provisioned. Missing
+  SOPS keys must be supplied before Orion builds or activates. See
+  [Wardrowbe setup](../modules/capabilities/wardrowbe/README.md) for provisioning,
+  activation, operations, upgrade limits and manual acceptance.
+- Focused source/configuration review only. No tests, host evaluation/build,
+  `just validate`, activation or remote changes. No existing secrets were decrypted
+  or read for discovery.
+
 ## Implemented, reviewed and validated; awaiting user checkpoint
 
 - Flat capability owners; service category flattened. AI, theme, Handy and

docs/design.md

@@ -23,6 +23,10 @@ LAN SSH on Polaris, and laptop power/firmware management on Zenith, are delibera
 Orion owns shared services. Tailnet administration supplements existing access;
 public Orion SSH closes only after private access is verified. Web services stay public.
 
+Wardrowbe uses a password gateway for trusted household access, followed by profile
+selection inside the app; verified individual identity is deferred. Its internal AI
+is disabled. Paid API usage, a Codex bridge and local model integration are deferred.
+
 Nix owns reproducible installation, integration and selected settings. Applications
 own credentials, sessions, content and deliberately interactive preferences. No
 plaintext secrets enter Git, Nix evaluation or store outputs. Company credentials