Complete Binky and identity conformance gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

This commit is contained in:
tegwick 2026-07-29 22:14:19 +02:00
parent 7171587611
commit 6aadcd2a1a
2 changed files with 15 additions and 2 deletions

View file

@ -181,7 +181,7 @@ outage, suspension, restore, and browser/MFA matrix remains.
```task
id: NK-WP-0023-T07
status: progress
status: done
priority: high
state_hub_task_id: "a574dcec-f7cd-417b-aeaa-5392a7428241"
```
@ -200,6 +200,11 @@ normalizes runtime transport whitespace, has 105 passing tests, and is live.
LLDAP SMTP is not configured, so first-password handoff and MFA/claim
acceptance remain rather than falling back to an operator-set password.
2026-07-29 complete: the reusable portal issued the password handoff, the
Binky user selected the password and enrolled TOTP, and a fresh login produced
Binky-only groups, roles `user` + `tenant-admin`, and AAL2 `pwd` + `otp`.
Administration of both `tenant:platform` and `tenant:coulomb` was denied.
## T08 - Document enterprise integration extension points
```task