coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: close canonical UserInfo repair

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
tegwick 2026-09-01 01:36:12 +02:00
parent 153258b9d3
commit 3ed3a391d6
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

13
workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
View file

@ -4,11 +4,11 @@ type: workplan
title: "Repair UserInfo canonical subject resolution" title: "Repair UserInfo canonical subject resolution"
domain: infotech domain: infotech
repo: key-cape repo: key-cape
status: active status: finished
owner: codex owner: codex
topic_slug: userinfo-canonical-subject-resolution topic_slug: userinfo-canonical-subject-resolution
created: "2026-08-31" created: "2026-08-31"
updated: "2026-08-31" updated: "2026-09-01"
--- ---
## Repair subject lookup ## Repair subject lookup
@ -38,9 +38,16 @@ behavior. Run the KeyCape test suite and image build checks.
```task ```task
id: KEY-WP-0012-T03 id: KEY-WP-0012-T03
status: progress status: done
priority: high priority: high
``` ```
Publish and deploy the corrected KeyCape image, prove `/userinfo` accepts a Publish and deploy the corrected KeyCape image, prove `/userinfo` accepts a
fresh human access token, then resume the governed Policy Nexus bootstrap. fresh human access token, then resume the governed Policy Nexus bootstrap.
Completed 2026-09-01. Forgejo Actions run 14 built commit
`153258b9d39273d53ca7ab5d1bdc09961ea9026e`; image digest
`sha256:4c7193efc3e50bd72a01812a583e823cc04f41ca96ef387b31ba9ae2533b80d0`
rolled out successfully. A fresh OpenBao OIDC flow passed `/userinfo`, and the
governed Policy Nexus bootstrap subsequently completed with deterministic
session revocation.