tegwick 4c4c7c4569 NK-WP-0049-T33: independent attempt receipt verifier, retained location and ACME reissue step ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 696317@bnt-lap001 Assistant-Session: bab9e511-0915-45b3-926a-2fab552edff6		2026-10-23 00:22:50 +02:00
..
isolated-keycape-native-fixture-manifest.json	fix(recovery): require one original client and refine native owner gates	2026-10-17 04:15:30 +02:00
lldap_groups_native_fixture.py	security: repair LDAP group callers and fail incomplete T07 acceptance	2026-10-14 01:17:35 +02:00
mfa_state_native_fixture.py	security: replace retired MFA diagnostic credential discovery with scoped checks	2026-10-13 22:24:35 +02:00
playwright_registration_native_test.go	security: prepare scoped Playwright consumer registrations and owner delivery	2026-10-13 23:13:48 +02:00
realm_bootstrap_native_fixture.py	security: preserve realm configuration and remove shell credential evaluation	2026-10-13 22:47:24 +02:00
resolver_cutover_native_fixture.py	fix: preserve resolver configuration during attended password cutover	2026-10-14 01:52:37 +02:00
run_isolated_keycape_native_fixture.py	feat(recovery): add isolated KeyCape restore and loss cleanup proof	2026-10-16 23:35:54 +02:00
test_admin_bootstrap.py	fix(security): make admin bootstrap private and non-overwriting	2026-10-12 15:02:15 +02:00
test_admin_bootstrap_privacyidea.py	fix(security): make admin bootstrap private and non-overwriting	2026-10-12 15:02:15 +02:00
test_bootstrap_recovery_transport.py	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
test_bootstrap_secret_output.py	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
test_custody_entrypoints.py	fix: make custody input explicit and remove partial decryptions	2026-10-12 10:53:30 +02:00
test_identity_backup_preparation.py	Record off-host database recovery and prepare identity backup coverage	2026-10-16 00:32:50 +02:00
test_identity_bundle.py	fix(recovery): bind admitted host and record live provider scope approval	2026-10-16 07:44:36 +02:00
test_identity_offline_recovery.py	Fix private recovery prompts on nonseekable terminals	2026-10-16 19:56:06 +02:00
test_identity_offsite.py	feat(recovery): verify scoped delivery and create first full offsite bundle	2026-10-16 09:21:55 +02:00
test_isolated_keycape_fixture_plan.py	feat(recovery): add isolated KeyCape restore and loss cleanup proof	2026-10-16 23:35:54 +02:00
test_isolated_keycape_recovery.py	fix(recovery): require one original client and refine native owner gates	2026-10-17 04:15:30 +02:00
test_isolated_keycape_session.py	feat(recovery): add isolated KeyCape restore and loss cleanup proof	2026-10-16 23:35:54 +02:00
test_isolated_lldap_recovery.py	Prepare native isolated directory recovery and offline service images	2026-10-16 20:33:57 +02:00
test_isolated_privacyidea_recovery.py	Prepare isolated privacyIDEA token and audit recovery checks	2026-10-16 21:00:36 +02:00
test_keycape_attempt_receipt_verifier.py	NK-WP-0049-T33: independent attempt receipt verifier, retained location and ACME reissue step	2026-10-23 00:22:50 +02:00
test_keycape_bootstrap.py	fix(security): reconcile KeyCape bootstrap with scoped factor custody	2026-10-13 19:46:53 +02:00
test_legacy_lldap_retirement.py	security: retire unsafe legacy LDAP lifecycle callers	2026-10-14 00:08:42 +02:00
test_lldap_group_maintenance.py	Preview one uid's directory groups for sign-in diagnosis (NK-WP-0051-T04).	2026-10-14 23:41:32 +02:00
test_mfa_state_diagnostic.py	security: replace retired MFA diagnostic credential discovery with scoped checks	2026-10-13 22:24:35 +02:00
test_openbao_lab_boundary.py	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
test_prepare_isolated_keycape.py	fix(identity): retain group provenance and prepare sealed recovery custody	2026-10-17 00:28:17 +02:00
test_privacyidea_key_custody.py	security: preserve privacyIDEA key custody and restore the actual PVC	2026-10-13 21:46:41 +02:00
test_privacyidea_offhost_recovery.py	Prepare bounded off-host privacyIDEA recovery drill	2026-10-16 00:09:13 +02:00
test_privacyidea_verification.py	security: preserve realm configuration and remove shell credential evaluation	2026-10-13 22:47:24 +02:00
test_private_manifest_binding.py	fix(identity): retain group provenance and prepare sealed recovery custody	2026-10-17 00:28:17 +02:00
test_realm_bootstrap.py	security: preserve realm configuration and remove shell credential evaluation	2026-10-13 22:47:24 +02:00
test_resolver_cutover.py	fix: preserve resolver configuration during attended password cutover	2026-10-14 01:52:37 +02:00
test_retirement_and_bundle_boundaries.py	Harden remaining bootstrap custody callers and prepare isolated recovery	2026-10-15 22:57:14 +02:00
test_rotation_output.py	fix(security): make service Secret updates private and conditional	2026-10-13 20:20:42 +02:00
test_scaleway_backup_inventory.py	Inventory off-host recovery assets through existing bounded backup routes	2026-10-15 23:58:41 +02:00
test_sealed_custody.py	fix(identity): retain group provenance and prepare sealed recovery custody	2026-10-17 00:28:17 +02:00
test_service_apply_caller.py	fix(security): make service Secret updates private and conditional	2026-10-13 20:20:42 +02:00
test_service_secret_custody.py	fix(security): make service Secret updates private and conditional	2026-10-13 20:20:42 +02:00
test_sops_private.py	feat(identity): add PostgreSQL provenance and verify sealed SOPS custody	2026-10-17 01:36:38 +02:00
test_sops_write.py	feat(identity): add PostgreSQL provenance and verify sealed SOPS custody	2026-10-17 01:36:38 +02:00
test_storage_share_inventory.py	Inventory off-host recovery assets through existing bounded backup routes	2026-10-15 23:58:41 +02:00
test_user_engine_platform_expansion.py	NK-WP-0026 finished: user-engine caller identity verified live against railiance01	2026-08-19 22:01:12 +02:00