coulomb/key-cape
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
key-cape/WORK-RECORDS.md
tegwick 205a1c0edc
All checks were successful
Authentication acceptance / acceptance (push) Successful in 1m1s
Details
Authentication acceptance / provider-contract (push) Successful in 24s
Details
Build and Publish Container Image / build-and-push (push) Successful in 40s
Details
Link the MFA challenge to lost-authenticator help. 
The OTP page now points at the account security page without carrying challenge state, and the render test checks that link. Workplan headings sit above their task blocks so the hub titles match KEY-WP-0038 and KEY-WP-0039. KEY-WP-0039-T02 stays waiting on the Forgejo identity gate.

Assistant: grok
Assistant-Session: 01a13b3b-6856-7900-9d04-bccba2337a30
2026-10-14 18:29:33 +02:00

20 KiB
Raw Blame History

Work Records — key-cape

Generated by statehub fix-consistency (CUST-WP-0061-T04, work-record stage 3). Do not edit by hand — edit the source file/block listed for each record and re-run fix-consistency to refresh this index. Archived workplans are omitted; closed decisions/intakes/engagements stay listed so recently-resolved work is still visible. [auto]

Kind ID Status Lane Source
workplan ADHOC-2026-09-05 finished — workplans/ADHOC-2026-09-05.md
workplan ADHOC-2026-09-07 finished — workplans/ADHOC-2026-09-07.md
workplan ADHOC-2026-09-27 finished — workplans/ADHOC-2026-09-27.md
workplan KEY-WP-0001 finished — workplans/KEY-WP-0001-keycape-implementation.md
workplan KEY-WP-0002 finished — workplans/KEY-WP-0002-container-image-gitea.md
workplan KEY-WP-0003 finished — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
workplan KEY-WP-0004 finished — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
workplan KEY-WP-0005 finished — workplans/KEY-WP-0005-iam-profile-core-claims.md
workplan KEY-WP-0006 finished — workplans/KEY-WP-0006-client-credentials-service-tokens.md
workplan KEY-WP-0007 finished — workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
workplan KEY-WP-0008 finished — workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
workplan KEY-WP-0009 finished — workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
workplan KEY-WP-0010 finished — workplans/KEY-WP-0010-openbao-operator-loopback-callback.md
workplan KEY-WP-0011 finished — workplans/KEY-WP-0011-live-secret-exposure-recovery.md
workplan KEY-WP-0012 finished — workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
workplan KEY-WP-0013 finished — workplans/KEY-WP-0013-approval-engine-resource-audience.md
workplan KEY-WP-0014 finished — workplans/KEY-WP-0014-native-credential-lane-handoff.md
workplan KEY-WP-0015 finished — workplans/KEY-WP-0015-scope-intent-assessment.md
workplan KEY-WP-0016 finished — workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
workplan KEY-WP-0017 finished — workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
workplan KEY-WP-0018 finished — workplans/KEY-WP-0018-export-completeness-evidence.md
workplan KEY-WP-0019 finished — workplans/KEY-WP-0019-upstream-provider-token-verification.md
workplan KEY-WP-0020 finished — workplans/KEY-WP-0020-migration-contract-preservation.md
workplan KEY-WP-0021 finished — workplans/KEY-WP-0021-snapshot-attribute-validation.md
workplan KEY-WP-0022 finished — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
workplan KEY-WP-0023 finished — workplans/KEY-WP-0023-live-migration-proof.md
workplan KEY-WP-0024 finished — workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
workplan KEY-WP-0025 finished — workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
workplan KEY-WP-0026 finished — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
workplan KEY-WP-0027 finished — workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
workplan KEY-WP-0028 finished — workplans/KEY-WP-0028-browser-client-field-validation.md
workplan KEY-WP-0029 finished — workplans/KEY-WP-0029-scope-reassessment.md
workplan KEY-WP-0030 finished — workplans/KEY-WP-0030-tenant-precondition-guard.md
workplan KEY-WP-0031 finished — workplans/KEY-WP-0031-gate-house-tenant-ruling.md
workplan KEY-WP-0032 finished — workplans/KEY-WP-0032-principal-type-provenance-guard.md
workplan KEY-WP-0033 finished — workplans/KEY-WP-0033-vergabe-fresh-login.md
workplan KEY-WP-0034 finished — workplans/KEY-WP-0034-account-recovery.md
workplan KEY-WP-0035 finished — workplans/KEY-WP-0035-optional-mfa.md
workplan KEY-WP-0036 finished — workplans/KEY-WP-0036-platform-factor-recovery.md
workplan KEY-WP-0037 finished — workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
workplan KEY-WP-0038 active — workplans/KEY-WP-0038-forgejo-oidc-client.md
workplan KEY-WP-0039 active — workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
workplan KEY-WP-0040 active — workplans/KEY-WP-0040-mfa-attended-run-findings.md
task ADHOC-2026-09-05-T01 done — workplans/ADHOC-2026-09-05.md
task ADHOC-2026-09-07-T01 done — workplans/ADHOC-2026-09-07.md
task ADHOC-2026-09-27-T01 done — workplans/ADHOC-2026-09-27.md
task ADHOC-2026-09-27-T02 done — workplans/ADHOC-2026-09-27.md
task KEY-WP-0001-T01 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T02 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T03 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T04 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T05 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T06 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T07 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T08 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T09 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T10 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T11 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T12 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T13 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T14 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T15 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T16 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T17 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T18 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T19 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T20 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T21 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T22 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0001-T23 done — workplans/KEY-WP-0001-keycape-implementation.md
task KEY-WP-0002-T01 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0002-T02 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0002-T03 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0002-T04 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0002-T05 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0002-T06 done — workplans/KEY-WP-0002-container-image-gitea.md
task KEY-WP-0003-T01 done — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task KEY-WP-0003-T02 done — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task KEY-WP-0003-T03 done — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task KEY-WP-0003-T04 done — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task KEY-WP-0003-T05 done — workplans/KEY-WP-0003-bootstrap-console-oidc-mfa-login.md
task KEY-WP-0004-T01 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T02 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T03 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T04 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T05 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T06 cancel — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0004-T07 done — workplans/KEY-WP-0004-binky-hedgehog-tenant-onboarding.md
task KEY-WP-0005-T01 done — workplans/KEY-WP-0005-iam-profile-core-claims.md
task KEY-WP-0005-T02 done — workplans/KEY-WP-0005-iam-profile-core-claims.md
task KEY-WP-0005-T03 done — workplans/KEY-WP-0005-iam-profile-core-claims.md
task KEY-WP-0006-T01 done — workplans/KEY-WP-0006-client-credentials-service-tokens.md
task KEY-WP-0006-T02 done — workplans/KEY-WP-0006-client-credentials-service-tokens.md
task KEY-WP-0006-T03 done — workplans/KEY-WP-0006-client-credentials-service-tokens.md
task KEY-WP-0006-T04 done — workplans/KEY-WP-0006-client-credentials-service-tokens.md
task KEY-WP-0006-T05 done — workplans/KEY-WP-0006-client-credentials-service-tokens.md
task KEY-WP-0007-T01 done — workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task KEY-WP-0007-T02 done — workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task KEY-WP-0007-T03 done — workplans/KEY-WP-0007-user-engine-portal-oidc-client.md
task KEY-WP-0008-T01 done — workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task KEY-WP-0008-T02 done — workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task KEY-WP-0008-T03 done — workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task KEY-WP-0008-T04 done — workplans/KEY-WP-0008-registration-handoff-and-client-mfa-policy.md
task KEY-WP-0009-T01 done — workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task KEY-WP-0009-T02 done — workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task KEY-WP-0009-T03 done — workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task KEY-WP-0009-T04 done — workplans/KEY-WP-0009-provider-capabilities-and-service-identities.md
task KEY-WP-0010-T01 done — workplans/KEY-WP-0010-openbao-operator-loopback-callback.md
task KEY-WP-0011-T01 done — workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task KEY-WP-0011-T02 done — workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task KEY-WP-0011-T03 done — workplans/KEY-WP-0011-live-secret-exposure-recovery.md
task KEY-WP-0012-T01 done — workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task KEY-WP-0012-T02 done — workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task KEY-WP-0012-T03 done — workplans/KEY-WP-0012-userinfo-canonical-subject-resolution.md
task KEY-WP-0013-T01 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T02 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T03 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T04 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T05 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T06 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0013-T07 done — workplans/KEY-WP-0013-approval-engine-resource-audience.md
task KEY-WP-0014-T01 done — workplans/KEY-WP-0014-native-credential-lane-handoff.md
task KEY-WP-0014-T02 done — workplans/KEY-WP-0014-native-credential-lane-handoff.md
task KEY-WP-0014-T03 done — workplans/KEY-WP-0014-native-credential-lane-handoff.md
task KEY-WP-0014-T04 done — workplans/KEY-WP-0014-native-credential-lane-handoff.md
task KEY-WP-0015-T01 done — workplans/KEY-WP-0015-scope-intent-assessment.md
task KEY-WP-0016-T01 done — workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task KEY-WP-0016-T02 done — workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task KEY-WP-0016-T03 done — workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task KEY-WP-0016-T04 done — workplans/KEY-WP-0016-authorization-code-protocol-hardening.md
task KEY-WP-0017-T01 done — workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task KEY-WP-0017-T02 done — workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task KEY-WP-0017-T03 done — workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task KEY-WP-0017-T04 done — workplans/KEY-WP-0017-canonical-model-and-discovery-conformance.md
task KEY-WP-0018-T01 done — workplans/KEY-WP-0018-export-completeness-evidence.md
task KEY-WP-0018-T02 done — workplans/KEY-WP-0018-export-completeness-evidence.md
task KEY-WP-0018-T03 done — workplans/KEY-WP-0018-export-completeness-evidence.md
task KEY-WP-0019-T01 done — workplans/KEY-WP-0019-upstream-provider-token-verification.md
task KEY-WP-0019-T02 done — workplans/KEY-WP-0019-upstream-provider-token-verification.md
task KEY-WP-0019-T03 done — workplans/KEY-WP-0019-upstream-provider-token-verification.md
task KEY-WP-0019-T04 done — workplans/KEY-WP-0019-upstream-provider-token-verification.md
task KEY-WP-0019-T05 done — workplans/KEY-WP-0019-upstream-provider-token-verification.md
task KEY-WP-0020-T01 done — workplans/KEY-WP-0020-migration-contract-preservation.md
task KEY-WP-0020-T02 done — workplans/KEY-WP-0020-migration-contract-preservation.md
task KEY-WP-0020-T03 done — workplans/KEY-WP-0020-migration-contract-preservation.md
task KEY-WP-0021-T01 done — workplans/KEY-WP-0021-snapshot-attribute-validation.md
task KEY-WP-0021-T02 done — workplans/KEY-WP-0021-snapshot-attribute-validation.md
task KEY-WP-0021-T03 done — workplans/KEY-WP-0021-snapshot-attribute-validation.md
task KEY-WP-0022-T01 done — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task KEY-WP-0022-T02 done — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task KEY-WP-0022-T03 done — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task KEY-WP-0022-T04 done — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task KEY-WP-0022-T05 done — workplans/KEY-WP-0022-replacement-harness-and-external-conformance.md
task KEY-WP-0023-T01 done — workplans/KEY-WP-0023-live-migration-proof.md
task KEY-WP-0023-T02 done — workplans/KEY-WP-0023-live-migration-proof.md
task KEY-WP-0023-T03 done — workplans/KEY-WP-0023-live-migration-proof.md
task KEY-WP-0023-T04 done — workplans/KEY-WP-0023-live-migration-proof.md
task KEY-WP-0023-T05 done — workplans/KEY-WP-0023-live-migration-proof.md
task KEY-WP-0024-T01 done — workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
task KEY-WP-0024-T02 done — workplans/KEY-WP-0024-tenant-roles-opt-in-wiring.md
task KEY-WP-0025-T01 done — workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task KEY-WP-0025-T02 done — workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task KEY-WP-0025-T03 done — workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task KEY-WP-0025-T04 done — workplans/KEY-WP-0025-runtime-lifecycle-and-readiness.md
task KEY-WP-0026-T01 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0026-T02 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0026-T03 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0026-T04 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0026-T05 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0026-T06 done — workplans/KEY-WP-0026-packaging-bootstrap-and-credential-handling.md
task KEY-WP-0027-T01 done — workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task KEY-WP-0027-T02 done — workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task KEY-WP-0027-T03 done — workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task KEY-WP-0027-T04 done — workplans/KEY-WP-0027-rollout-readiness-and-live-state.md
task KEY-WP-0028-T01 done — workplans/KEY-WP-0028-browser-client-field-validation.md
task KEY-WP-0028-T02 done — workplans/KEY-WP-0028-browser-client-field-validation.md
task KEY-WP-0029-T01 done — workplans/KEY-WP-0029-scope-reassessment.md
task KEY-WP-0029-T02 done — workplans/KEY-WP-0029-scope-reassessment.md
task KEY-WP-0029-T03 done — workplans/KEY-WP-0029-scope-reassessment.md
task KEY-WP-0030-T01 done — workplans/KEY-WP-0030-tenant-precondition-guard.md
task KEY-WP-0030-T02 done — workplans/KEY-WP-0030-tenant-precondition-guard.md
task KEY-WP-0031-T01 done — workplans/KEY-WP-0031-gate-house-tenant-ruling.md
task KEY-WP-0031-T02 done — workplans/KEY-WP-0031-gate-house-tenant-ruling.md
task KEY-WP-0032-T01 done — workplans/KEY-WP-0032-principal-type-provenance-guard.md
task KEY-WP-0032-T02 done — workplans/KEY-WP-0032-principal-type-provenance-guard.md
task KEY-WP-0033-T01 done — workplans/KEY-WP-0033-vergabe-fresh-login.md
task KEY-WP-0033-T02 done — workplans/KEY-WP-0033-vergabe-fresh-login.md
task KEY-WP-0034-T01 done — workplans/KEY-WP-0034-account-recovery.md
task KEY-WP-0034-T02 done — workplans/KEY-WP-0034-account-recovery.md
task KEY-WP-0035-T01 done — workplans/KEY-WP-0035-optional-mfa.md
task KEY-WP-0035-T02 done — workplans/KEY-WP-0035-optional-mfa.md
task KEY-WP-0035-T03 done — workplans/KEY-WP-0035-optional-mfa.md
task KEY-WP-0035-T04 done — workplans/KEY-WP-0035-optional-mfa.md
task KEY-WP-0035-T05 done — workplans/KEY-WP-0035-optional-mfa.md
task KEY-WP-0036-T01 done — workplans/KEY-WP-0036-platform-factor-recovery.md
task KEY-WP-0036-T02 cancel — workplans/KEY-WP-0036-platform-factor-recovery.md
task KEY-WP-0036-T03 done — workplans/KEY-WP-0036-platform-factor-recovery.md
task KEY-WP-0037-T01 done — workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task KEY-WP-0037-T02 done — workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task KEY-WP-0037-T03 done — workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task KEY-WP-0037-T04 done — workplans/KEY-WP-0037-secrets-engine-openbao-registration-custody.md
task KEY-WP-0038-T01 done — workplans/KEY-WP-0038-forgejo-oidc-client.md
task KEY-WP-0038-T02 wait — workplans/KEY-WP-0038-forgejo-oidc-client.md
task KEY-WP-0038-T03 wait — workplans/KEY-WP-0038-forgejo-oidc-client.md
task KEY-WP-0038-T04 cancel — workplans/KEY-WP-0038-forgejo-oidc-client.md
task KEY-WP-0039-T01 done — workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task KEY-WP-0039-T02 wait — workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task KEY-WP-0039-T03 done — workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
task KEY-WP-0040-T01 progress — workplans/KEY-WP-0040-mfa-attended-run-findings.md
task KEY-WP-0040-T02 progress — workplans/KEY-WP-0040-mfa-attended-run-findings.md
intake KEY-IN-0001 closed — intakes/intakes.md