key-cape/scripts
tegwick bae9f85160 KEY-WP-0039: probe registration packet and attended negative-probe script
T01 done: railiance-platform agreed the case list. The packet adds an
otherwise-valid expiry client and pins audience on the claim probes so each
token fails only the claim under test. The script prints one refused boolean
and refusal class per case, revokes any accepted token, and never counts a
transport failure as a refusal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 779409@bnt-lap001
Assistant-Session: c658ca06-19b5-468d-be64-2985dc20bfd3
2026-10-10 13:18:24 +02:00
..
bootstrap-dev.sh Reconcile packaging, bootstrap and migration credential handling 2026-09-08 09:51:59 +02:00
collect-upstream-issuer-proof.py feat(oidc): prepare one-shot upstream issuer proof without token disclosure 2026-09-08 23:14:46 +02:00
factor_recovery.py Refuse multi-owner factors and lock ownership during recovery 2026-09-13 21:21:24 +02:00
keycape_onboarding_guard.py Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
openbao_negative_probe.py KEY-WP-0039: probe registration packet and attended negative-probe script 2026-10-10 13:18:24 +02:00
provider-browser-fixture.py Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
provider-onboarding-contract.py Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
provider_browser.mjs Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
provider_browser_acceptance.py Implement scoped P06 authentication policy and guarded optional onboarding 2026-09-14 00:00:05 +02:00
recovery_service.py Reconcile recovery by support reference and bound provider lookup 2026-09-13 21:11:03 +02:00
render-upstream-issuer-probe.py feat(oidc): prepare one-shot upstream issuer proof without token disclosure 2026-09-08 23:14:46 +02:00
test-scenario-b.sh Reconcile packaging, bootstrap and migration credential handling 2026-09-08 09:51:59 +02:00
test-scenario-c.sh Reconcile packaging, bootstrap and migration credential handling 2026-09-08 09:51:59 +02:00
test_factor_recovery.py Verify factor identity again after recovery mutation 2026-09-13 17:30:23 +02:00
test_openbao_negative_probe.py KEY-WP-0039: probe registration packet and attended negative-probe script 2026-10-10 13:18:24 +02:00
test_recovery_service.py Reconcile recovery by support reference and bound provider lookup 2026-09-13 21:11:03 +02:00
test_render_upstream_issuer_probe.py feat(oidc): prepare one-shot upstream issuer proof without token disclosure 2026-09-08 23:14:46 +02:00