net-kingdom/sso-mfa
tegwick 60b41a1f51 NK-WP-0048-T30: source composer for the seven-step 1.2 descriptor set
Composes through the explicit 1.2 version root, closes each adapter
descriptor through Warden Descriptor.decode and checks step/owner/lane
against the 1.2 follow_through. Refuses partial, duplicate, unknown,
mismatched and 1.1-default-changing compositions. The generated candidate
artifact is not an admission: the current adapters do not compose
(ensure-groups, mint-secret, hand-over refused) and worker-proposed names
are marked owner_confirmation_required.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 903097@bnt-lap001
Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23
2026-10-17 08:07:59 +02:00
..
bootstrap fix(identity): retain group provenance and prepare sealed recovery custody 2026-10-17 00:28:17 +02:00
k8s NK-WP-0048-T30: source composer for the seven-step 1.2 descriptor set 2026-10-17 08:07:59 +02:00
WORKPLAN.md security: repair LDAP group callers and fail incomplete T07 acceptance 2026-10-14 01:17:35 +02:00