tegwick
6420d80a70
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
1.9 KiB
| id | type | title | domain | repo | status | owner | topic_slug | created | updated | state_hub_workstream_id |
|---|---|---|---|---|---|---|---|---|---|---|
| NK-WP-0038 | workplan | Tenant-scoped identity lifecycle for account journeys | infotech | net-kingdom | finished | codex | infotech | 2026-09-13 | 2026-09-13 | c0fd56ef-edde-57ab-904f-6d1ff567f74a |
Implement scoped directory access changes
id: NK-WP-0038-T01
status: done
priority: high
state_hub_task_id: "6470d6cd-c983-59c7-b13a-ba93672a3eda"
Support USER-WP-0029-T01/T02 (journey T06): /v1/identities/tenant-access changes only the target tenant's users/admins groups, never deletes the identity, clears global suspension or touches other tenants. Validate tenant/role/status; verify readback before reporting success. Repeated desired-state requests converge. Preserve original identity-wide owner operations for explicitly global use.
Verify and publish the scoped provider contract
id: NK-WP-0038-T02
status: done
priority: high
state_hub_task_id: "e36392f0-31e1-5e02-b2c0-e0efd8b15693"
Run provider regression and new isolation/readback/retry tests, build a pinned image, update owner manifests and deploy before the portal uses this endpoint. No live user lifecycle mutation is part of deployment verification. OTP provider credentials remain a separate NK-WP-0033/KEY-WP-0035 dependency.
Provider regression: 20 tests passed, including tenant-group isolation, repeated desired-state updates, failed readback/retry and preservation of global suspension. CI now runs the provider suite for changes to identity-provisioner.
Deployed source a0cc947, image sha256:698620e25cabccd746c10c332030e436428d184baab0f8270936494d285216a6; Ready 1/1, live implementation confirmed. CI provider run 228 passed. Detailed receipt: user-engine/docs/evidence/2026-09-13-journey-release.md. Separate OTP work remains live in NK-WP-0033 and KEY-WP-0035; no OTP completion or real-user lifecycle mutation is claimed.