coulomb-social/workplans/CSOC-WP-0016-mfa-setup-link.md
tegwick dbbaae350c
Some checks failed
Use-case regression gate / usecase-regressions (push) Failing after 6m55s
Record WP-0016 completion and refresh the work-record index
Assistant: grok
Assistant-Session: 01a12cc2-e3b2-77a3-8aef-9cc60e577fee
2026-10-11 23:32:39 +02:00

43 lines
1.5 KiB
Markdown

---
id: CSOC-WP-0016
type: workplan
title: "Link authenticator setup from the coulomb.social account page"
domain: communication
repo: coulomb-social
status: finished
owner: claude-code
topic_slug: coulomb-social
created: "2026-10-11"
updated: "2026-10-11"
flavor: implementation
depends_on: []
state_hub_workstream_id: "bf60ed62-5cbb-5276-80da-6c5dec302a2e"
---
Founder finding F1 from the attended MFA run of 2026-10-11 (user-engine
`docs/evidence/2026-10-11-mfa-attended-u05-u08.md`). coulomb.social intentionally stays password-only
(KeyCape client `mfaRequired: false`), but users should be able to find optional MFA setup from the
app.
## Add "Manage authenticator app" to the session/account details
```task
id: CSOC-WP-0016-T01
status: done
priority: low
state_hub_task_id: "b8bb27c0-de32-597e-9106-c5657d7ab130"
```
On the signed-in user's session/account details page, add a "Manage authenticator app (optional)"
link to `https://pink-account.coulomb.social/` and a short line pointing to
`https://users.coulomb.social/security` for help. Do not show MFA status unless it comes from an
authoritative source. Do not make OTP required.
2026-10-11: Session details shows the optional link and the NetKingdom security
help line. The page does not display enrollment or require a one-time code.
Password sign-in is unchanged. No separate residual: the link ships with the
next app image, and this task does not deploy it.
## Completion
Finished in the checkout on 2026-10-11. No residual intake.