From 05e05aa94525ce19c6d3e5fc9a8cdad315ee1d8c Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 8 Oct 2026 21:26:37 +0200 Subject: [PATCH] KEY-WP-0038-T01 done: founder accepted the Forgejo client request Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 5457@bnt-lap001 Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012 --- docs/forgejo-oidc-client-request.yaml | 2 +- workplans/KEY-WP-0038-forgejo-oidc-client.md | 10 +++++++--- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/docs/forgejo-oidc-client-request.yaml b/docs/forgejo-oidc-client-request.yaml index 4642b71..b998ba9 100644 --- a/docs/forgejo-oidc-client-request.yaml +++ b/docs/forgejo-oidc-client-request.yaml @@ -6,7 +6,7 @@ # Context: forgejo.coulomb.social is closing (prj-forgejo-org-refactor # ORGREF-WP-0002, decisions/forge-visibility-policy.md). Sign-in through # NetKingdom must exist and be proven before any repository closes. -status: proposed-2026-10-08 +status: accepted-2026-10-08 # founder, in session; registration is T02 owner: key-cape consumer: railiance-apps (Forgejo Helm release, namespace forgejo) issuer: https://kc.coulomb.social diff --git a/workplans/KEY-WP-0038-forgejo-oidc-client.md b/workplans/KEY-WP-0038-forgejo-oidc-client.md index 40a1aa8..5c836a8 100644 --- a/workplans/KEY-WP-0038-forgejo-oidc-client.md +++ b/workplans/KEY-WP-0038-forgejo-oidc-client.md @@ -47,9 +47,7 @@ Helm release. ```task id: KEY-WP-0038-T01 -status: wait -needs_human: true -blocking_reason: "Packet drafted; awaits founder acceptance and railiance-apps agreement on source and group names." +status: done priority: high state_hub_task_id: "5f019d13-1fa3-5b88-a27a-75a3339ca96e" ``` @@ -85,6 +83,12 @@ with a required-claim gate, no automatic account creation, and linking of local accounts. It also proposes that agents and services use scoped tokens bound to service identities, not browser sign-in. +2026-10-08: accepted by the founder (in session). railiance-apps' RAPPS-WP-0016 +uses the same authentication-source name `netkingdom` and the same group names, +so the agreement condition holds. Before T02, the LLDAP groups `forge-admins`, +`forge-coulomb-owners` and `forge-coulomb-readers` must exist, with the founder +in the first two. + ```task id: KEY-WP-0038-T02 status: wait