net-kingdom/sso-mfa
tegwick a65673985c
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
NK-WP-0056-T04: svc-keycape bind delivered from OpenBao; bindPW cleared from keycape-config
Founder-run under CCR-2026-0054: setup, ESO apply, verify, rollout of KeyCape
main-e2b5fa1 with KEYCAPE_LLDAP_BIND_PW, clear-password, restart, env-only verify;
admin signed in with OTP before and after the clear. Custody re-sealed after setup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 896183@bnt-lap001
Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2
2026-10-31 10:52:05 +01:00
..
bootstrap NK-WP-0056-T04: svc-keycape bind delivered from OpenBao; bindPW cleared from keycape-config 2026-10-31 10:52:05 +01:00
k8s NK-WP-0056-T04: svc-keycape bind lane (source only, CCR-2026-0054) 2026-10-31 10:31:30 +01:00
WORKPLAN.md security: repair LDAP group callers and fail incomplete T07 acceptance 2026-10-14 01:17:35 +02:00