coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin final P04 release and native ownership-lock evidence

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 21:30:50 +02:00
parent 63b3070853
commit 187c49abe5
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/KEY-WP-0036-platform-factor-recovery.md
View file

@ -71,10 +71,10 @@ after possession of a replacement factor is proven. Keep P04 incomplete until
browser success, failure and recovery paths pass; CLI tests alone do not close it. browser success, failure and recovery paths pass; CLI tests alone do not close it.
Completion evidence: user-engine/docs/evidence/2026-09-13-p04-recovery.md. Completion evidence: user-engine/docs/evidence/2026-09-13-p04-recovery.md.
KeyCape d15f4dd and portal 11dfaf5 are released. Fifteen recovery tests, 219 portal KeyCape 63b3070 and portal c298cd9 are released. Fifteen recovery tests, 219 portal
regressions with PostgreSQL and 19 Chromium checks pass. Installed-provider regressions with PostgreSQL and 19 Chromium checks pass. Installed-provider
provider-p04-contract-02 verifies signature/role/assurance denials, confirmation, provider-p04-contract-03 verifies signature/role/assurance denials, confirmation,
audited mutation/retry/reference lookup and replacement OTP possession/login. multi-owner refusal, ownership locking, audited mutation/retry/reference lookup and replacement OTP possession/login.
Production health, anonymous/invalid-token denials, signing-key connectivity, Production health, anonymous/invalid-token denials, signing-key connectivity,
rollout and new-enrollment policy readback pass. Positive mutation used disposable rollout and new-enrollment policy readback pass. Positive mutation used disposable
fixtures; no real account was changed. Provider and portal implement the same fixtures; no real account was changed. Provider and portal implement the same