diff --git a/security-cases/nk-synthetic-journey.yaml b/security-cases/nk-synthetic-journey.yaml index d7f9587..a11be3d 100644 --- a/security-cases/nk-synthetic-journey.yaml +++ b/security-cases/nk-synthetic-journey.yaml @@ -1,4 +1,4 @@ -# KeyCape client for the synthetic MFA journey (NK-WP-0056-T09). Proposed: no acceptance yet. +# KeyCape client for the synthetic MFA journey (NK-WP-0056-T09). Accepted by the founder 2026-10-31. # Public PKCE client; the redirect URI is never served: the runner reads the code from the # Location header. mfa_required pins MFA, and the runner also requests acr urn:netkingdom:aal2. # access_groups is required by the type; synthetic-journey has no members and no service maps it. @@ -7,7 +7,13 @@ kind: SecurityCase spec: id: nk-synthetic-journey type: oidc-browser-relying-party@1.1 - status: proposed + status: accepted + acceptance: + at: "2026-10-31" + record: "Founder accepted the case as proposed in session 2026-10-31 (NK-WP-0056-T09; hub decision 91323969; CCR-2026-0057 approved railiance-platform 2ac9786)" + by: + - {role: owner, name: founder} + - {role: founder, name: founder} owner: repo: net-kingdom person: founder