tegwick b6af6c5268 Finish KEY-WP-0008: registration handoff and client MFA isolation ... Add signed registration/enrollment handoffs, per-request assurance policy with login-session isolation, and /logout. coulomb-social stays AAL1 unless acr_values or another client raises the bar.		2026-08-16 01:05:27 +02:00
..
KEY-WP-0001-keycape-implementation.md	Normalize agent instructions and workplan frontmatter (STATE-WP-0067)	2026-06-22 23:16:27 +02:00
KEY-WP-0002-container-image-gitea.md	Normalize agent instructions and workplan frontmatter (STATE-WP-0067)	2026-06-22 23:16:27 +02:00
KEY-WP-0003-bootstrap-console-oidc-mfa-login.md	Normalize agent instructions and workplan frontmatter (STATE-WP-0067)	2026-06-22 23:16:27 +02:00
KEY-WP-0004-binky-hedgehog-tenant-onboarding.md	docs: point at RMASTER-WP-0019 after master prefix rename	2026-08-14 14:29:19 +02:00
KEY-WP-0005-iam-profile-core-claims.md	KEY-WP-0005-T02-T03: cached tenant_roles claim, close workplan	2026-07-24 00:18:17 +02:00
KEY-WP-0006-client-credentials-service-tokens.md	Complete KeyCape service-token rollout	2026-07-27 20:17:55 +02:00
KEY-WP-0007-user-engine-portal-oidc-client.md	Finish portal OIDC integration	2026-07-29 22:59:38 +02:00
KEY-WP-0008-registration-handoff-and-client-mfa-policy.md	Finish KEY-WP-0008: registration handoff and client MFA isolation	2026-08-16 01:05:27 +02:00