coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NK-WP-0056-T05 done: journey runner green in identity-provider journey acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 994874@bnt-lap001
Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
This commit is contained in:
tegwick 2026-10-31 11:54:46 +01:00
parent 72ff31b497
commit 0409c7b375
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -339,7 +339,7 @@
| task | NK-WP-0056-T02 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T03 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T04 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T05 | progress | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T05 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T06 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T07 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
| task | NK-WP-0056-T08 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |

6
workplans/NK-WP-0056-bounded-executor-path.md
View file

@ -241,7 +241,7 @@ No bind rotation needs the custody copy decrypted. The custody copy keeps the cu
```task
id: NK-WP-0056-T05
status: progress
status: done
priority: medium
assignee: claude-code
depends_on: [NK-WP-0056-T04]
@ -269,8 +269,8 @@ KeyCape's JWKS without third-party packages; `host_map` for an in-cluster execut
`test_journey.py`. Each broken bind fails closed at its step (`svc-authelia` → `authelia_first_factor`,
`svc-keycape` → `keycape_callback`, `svc-privacyidea` → `keycape_otp`), and a sign-in without an OTP
challenge, an aal1 token or a tampered signature fails. Green locally and in the workflow's pinned
`python:3.12-slim` image with the network off; the job is added to `identity-journeys.yaml`. Done
once the workflow run on `main` is green.
`python:3.12-slim` image with the network off; the job is added to `identity-journeys.yaml`.
**Done:** the workflow's `provider` job passed on `0b0c6c9` (run 719). Next: T08.
## Synthetic identity stack on pinned images