coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record NK-WP-0051 owner implementations and fix the assurance source.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1041694@bnt-lap001
Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52
This commit is contained in:
tegwick 2026-10-14 23:53:38 +02:00
parent 2cc09ceb05
commit cb634be39b
2 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/sign-in-diagnosis.md
View file

@ -17,7 +17,7 @@ authorization request and no earlier one**.
| --- | --- | --- |
| `uid` | The uid KeyCape resolved for this request | Authelia `preferred_username` (fallback `sub`), as KeyCape's Authelia adapter resolves it |
| `groups` | Directory group display names, sorted | That uid's LLDAP `memberOf`, reduced to display names |
| `assurance` | `aal2` if this request verified a one-time code, else `aal1` | KeyCape's assurance decision for this request (`MFAVerified`) |
| `assurance` | `aal2` if this request verified a one-time code, else `aal1` | KeyCape: a one-time code verified within this request. Not `MFAVerified` alone, which is also true when a reused `aal2` session satisfies the request |
| `client_id` | The relying party the login returns to | The authorization request |
| `openbao_error` | OpenBao's error text, verbatim | ops-mason receipt only |
@ -62,6 +62,7 @@ OpenBao groups refusal.
| Item | Value |
| --- | --- |
| key-cape image digest with the page and log line | _pending NK-WP-0051-T02_ |
| user-engine change | _pending NK-WP-0051-T03_ |
| ops-mason / railiance-platform acceptance | _pending NK-WP-0051-T06_ |
| key-cape page and log line | source `af3b1b0` (flag `signInDiagnosis`); image digest pending KEY-WP-0041-T02 |
| user-engine two-session lines | source `80f5870`; image digest pending USER-WP-0039-T02 |
| ops-mason receipt, fresh-browser login, `capabilities-self` proof | ops-mason `fca5591` (MASON-WP-0012); live proof pending MASON-WP-0012-T04 |
| `sys/capabilities-self` grant and UI workload-role select | railiance-platform `0f0282a` (RPF-WP-0057); CCR-2026-0045 approval/apply and overlay deploy pending RPF-WP-0057-T02/T04 |