Record p01 repeated stale MFA refusal and authentication dependency

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029c-c003-7283-acc9-930b434e6cae
This commit is contained in:
tegwick 2026-10-03 20:30:49 +02:00
parent 15c330ccd0
commit 219d83ad1b
2 changed files with 32 additions and 1 deletions

View file

@ -0,0 +1,17 @@
{
"memo_id": "infd-20261003-p01",
"observed_at": "2026-10-03T18:27:49.372959+00:00",
"action": "read",
"outcome": "policy_denied",
"policy_version": "v7",
"assurance_at": 1791047288,
"authentication_time_utc": "2026-10-03T17:08:08+00:00",
"mfa_age_at_request_seconds": 4781,
"maximum_mfa_age_seconds": 900,
"identity_and_memo_pins_match": true,
"fresh_password_and_otp_on_latest_attempt": "awaiting operator confirmation",
"dependency": "INFD-IN-0005",
"next_step": "Complete KeyCape /account/logout and upstream browser sign-out, then fresh password/OTP login. If the signed authentication time remains old after real OTP, KeyCape owns the correction and completed-browser proof.",
"policy_relaxed": false,
"agent_performed_human_act": false
}