All workflows acceptance.yaml image.yaml

Actor

All actors forgejo_admin tegwick

Status

All status Success Failure Waiting Running

Register informed-decision-sitting-requester as create-only.

#67 -Commit 1620ce2edd pushed by tegwick

main

2026-09-15 18:10:27 +00:00

40s

Implement scoped P06 authentication policy and guarded optional onboarding

#65 -Commit e0b3c25f06 pushed by tegwick

main

2026-09-13 22:02:29 +00:00

42s

Implement P05 checked services and safe selected delivery recovery

#63 -Commit aa709fb854 pushed by tegwick

main

2026-09-13 20:14:43 +00:00

36s

Verify reader scope before accepting absence of enrolled factors

#55 -Commit 113f3a6296 pushed by tegwick

main

2026-09-13 15:01:14 +00:00

53s

Require confirmed enrollment and genuine OTP evidence for MFA

#53 -Commit 122a0d1369 pushed by tegwick

main

2026-09-13 14:39:03 +00:00

41s

Support provider credential renewal and reject unsuccessful OTP validation

#51 -Commit 632b1f1376 pushed by tegwick

main

2026-09-13 12:25:22 +00:00

44s

Support opt-in MFA per browser client with authoritative enrollment checks

#49 -Commit ac8ed65203 pushed by tegwick

main

2026-09-12 22:28:14 +00:00

40s

Allow registered provider redirects after sign-out confirmation

#48 -Commit 4d8b8fe934 pushed by tegwick

main

2026-09-12 08:48:22 +00:00

41s

Preserve browser Origin on the confirmed sign-out form

#47 -Commit 91efb6d988 pushed by tegwick

main

2026-09-12 08:44:12 +00:00

35s

Add central login recovery and confirmed shared sign-out

#46 -Commit 074c2ce498 pushed by tegwick

main

2026-09-12 08:35:38 +00:00

44s

Forward fresh-login requirements to the authentication provider

#45 -Commit 8d4336e944 pushed by tegwick

main

2026-09-12 00:46:49 +00:00

44s

Close G10, the last of the ten assessment gaps

#44 -Commit b66ce13e4e pushed by tegwick

main

2026-09-10 21:08:01 +00:00

35s

Register the approver client now its callback exists

#43 -Commit c9bb7fac58 pushed by tegwick

main

2026-09-10 20:51:30 +00:00

47s

Carry the tenant claim's provenance, and correct a guard the ruling voided

#42 -Commit 63d646b594 pushed by tegwick

main

2026-09-10 05:59:32 +00:00

45s

Make the static-registration precondition a checked condition

#41 -Commit 5f516a0fbb pushed by tegwick

main

2026-09-09 21:26:04 +00:00

44s

Reject service-identity fields a browser client silently ignores

#40 -Commit 74b35b6107 pushed by tegwick

main

2026-09-09 12:43:37 +00:00

34s

Let a human token carry the zone it is issued into, without relabelling anyone

#39 -Commit 329e48f64a pushed by tegwick

main

2026-09-09 12:42:15 +00:00

45s

Answer the approver-client questions, and fix what checking them turned up

#38 -Commit a73da29093 pushed by tegwick

main

2026-09-09 12:26:53 +00:00

41s

feat(oidc): prepare one-shot upstream issuer proof without token disclosure

#37 -Commit 6f33abddcf pushed by tegwick

main

2026-09-08 21:15:32 +00:00

42s

Require typed issuer refusals in live registration verification

#36 -Commit dcebd46fa6 pushed by tegwick

main

2026-09-08 14:46:52 +00:00

41s

Ship the live-registration check both blocked tasks depend on

#35 -Commit 2a8735173b pushed by tegwick

main

2026-09-08 12:32:07 +00:00

45s

Establish the live state and find a rollout precondition for G10

#34 -Commit 7dda967c27 pushed by tegwick

main

2026-09-08 09:42:53 +00:00

45s

Close the KEY-WP-0009 handoff gap and deliver the two blocked admissions

#33 -Commit 7c9ed852ff pushed by tegwick

main

2026-09-08 08:23:58 +00:00

39s

Reconcile packaging, bootstrap and migration credential handling

#32 -Commit 3b72834bca pushed by tegwick

main

2026-09-08 07:53:02 +00:00

43s

Give the runtime real readiness, graceful shutdown and stated limits

#31 -Commit d568b79223 pushed by tegwick

main

2026-09-08 07:44:55 +00:00

41s

Wire tenant_roles as explicit opt-in configuration

#30 -Commit a0f3cac122 pushed by tegwick

main

2026-09-08 07:00:55 +00:00

48s

Prove the migration against live directories and fix what that surfaced

#29 -Commit e729ad4c28 pushed by tegwick

main

2026-09-07 22:30:40 +00:00

41s

Make the replacement harness runnable and target a live issuer

#28 -Commit 7534552754 pushed by tegwick

main

2026-09-07 21:33:09 +00:00

37s

Make snapshot attribute validation enforce a real rule

#27 -Commit 21acb5cdd6 pushed by tegwick

main

2026-09-07 21:28:04 +00:00

40s

Make the Keycloak transform preserve or name every policy field

#26 -Commit e9fc8544ab pushed by tegwick

main

2026-09-07 11:49:52 +00:00

37s