key-cape

Author	SHA1	Message	Date
tegwick	b6af6c5268	Finish KEY-WP-0008: registration handoff and client MFA isolation All checks were successful Build and Publish Container Image / build-and-push (push) Successful in 34s Details Add signed registration/enrollment handoffs, per-request assurance policy with login-session isolation, and /logout. coulomb-social stays AAL1 unless acr_values or another client raises the bar.	2026-08-16 01:05:27 +02:00
tegwick	3bef507cb8	KEY-WP-0008: honor per-client mfaRequired and acr_values step-up All checks were successful Build and Publish Container Image / build-and-push (push) Successful in 30s Details Allow coulomb-social ordinary login at AAL1 via mfaRequired: false while keeping provider requireForAll for clients without an override. Preserve explicit acr_values=aal2 for step-up.	2026-08-09 22:42:51 +02:00