coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record why the live overview is refused: MFA age 1744 s against 900 (INFD-WP-0004-T01)

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 359683@bnt-lap001
Assistant-Session: eebdc939-7a9b-4e50-9d39-c8437e8a14ec
This commit is contained in:
tegwick 2026-09-21 22:48:25 +02:00
parent f47805bece
commit b105f93b80
3 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/flex-auth-request-list-action.md
View file

@ -28,7 +28,9 @@ consequences:
previous session's timestamp even after an actual MFA (`INFD-IN-0005`).
Authelia 4.38 cannot be made to force reauthentication (`cbea539`). So a
browsing session usually cannot meet a bar designed for binding.
Confirming this against the live policy observations is pending.
Confirmed on 2026-09-21: all four latest checks matched every identity
condition except age, which was 1744 seconds against 900
(`docs/evidence/2026-09-21-overview-read-refusal.json`).
2. **The three `SECRETS-WP-0010-T03-*` memos are out of scope for good.** They
were admitted under `informed-decision.t03-review`. The served sitting
package does not name them, so their own reviewer cannot see their outcome.