coulomb-social/workplans/CSOC-WP-0016-mfa-setup-link.md
tegwick dbbaae350c
Some checks failed
Use-case regression gate / usecase-regressions (push) Failing after 6m55s
Record WP-0016 completion and refresh the work-record index
Assistant: grok
Assistant-Session: 01a12cc2-e3b2-77a3-8aef-9cc60e577fee
2026-10-11 23:32:39 +02:00

1.5 KiB

id type title domain repo status owner topic_slug created updated flavor depends_on state_hub_workstream_id
CSOC-WP-0016 workplan Link authenticator setup from the coulomb.social account page communication coulomb-social finished claude-code coulomb-social 2026-10-11 2026-10-11 implementation
bf60ed62-5cbb-5276-80da-6c5dec302a2e

Founder finding F1 from the attended MFA run of 2026-10-11 (user-engine docs/evidence/2026-10-11-mfa-attended-u05-u08.md). coulomb.social intentionally stays password-only (KeyCape client mfaRequired: false), but users should be able to find optional MFA setup from the app.

Add "Manage authenticator app" to the session/account details

id: CSOC-WP-0016-T01
status: done
priority: low
state_hub_task_id: "b8bb27c0-de32-597e-9106-c5657d7ab130"

On the signed-in user's session/account details page, add a "Manage authenticator app (optional)" link to https://pink-account.coulomb.social/ and a short line pointing to https://users.coulomb.social/security for help. Do not show MFA status unless it comes from an authoritative source. Do not make OTP required.

2026-10-11: Session details shows the optional link and the NetKingdom security help line. The page does not display enrollment or require a one-time code. Password sign-in is unchanged. No separate residual: the link ships with the next app image, and this task does not deploy it.

Completion

Finished in the checkout on 2026-10-11. No residual intake.