From d654f8a6ec2bd4e13b97ac9b0fa5ea9b97685caa Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 31 Oct 2026 12:51:09 +0100 Subject: [PATCH] NK-WP-0056-T09: SecurityCase nk-synthetic-journey accepted by the founder Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87 --- security-cases/nk-synthetic-journey.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/security-cases/nk-synthetic-journey.yaml b/security-cases/nk-synthetic-journey.yaml index d7f9587..a11be3d 100644 --- a/security-cases/nk-synthetic-journey.yaml +++ b/security-cases/nk-synthetic-journey.yaml @@ -1,4 +1,4 @@ -# KeyCape client for the synthetic MFA journey (NK-WP-0056-T09). Proposed: no acceptance yet. +# KeyCape client for the synthetic MFA journey (NK-WP-0056-T09). Accepted by the founder 2026-10-31. # Public PKCE client; the redirect URI is never served: the runner reads the code from the # Location header. mfa_required pins MFA, and the runner also requests acr urn:netkingdom:aal2. # access_groups is required by the type; synthetic-journey has no members and no service maps it. @@ -7,7 +7,13 @@ kind: SecurityCase spec: id: nk-synthetic-journey type: oidc-browser-relying-party@1.1 - status: proposed + status: accepted + acceptance: + at: "2026-10-31" + record: "Founder accepted the case as proposed in session 2026-10-31 (NK-WP-0056-T09; hub decision 91323969; CCR-2026-0057 approved railiance-platform 2ac9786)" + by: + - {role: owner, name: founder} + - {role: founder, name: founder} owner: repo: net-kingdom person: founder