tegwick
6420d80a70
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
48 lines
1.9 KiB
Markdown
48 lines
1.9 KiB
Markdown
---
|
|
id: NK-WP-0038
|
|
type: workplan
|
|
title: "Tenant-scoped identity lifecycle for account journeys"
|
|
domain: infotech
|
|
repo: net-kingdom
|
|
status: finished
|
|
owner: codex
|
|
topic_slug: infotech
|
|
created: "2026-09-13"
|
|
updated: "2026-09-13"
|
|
state_hub_workstream_id: "c0fd56ef-edde-57ab-904f-6d1ff567f74a"
|
|
---
|
|
|
|
## Implement scoped directory access changes
|
|
|
|
```task
|
|
id: NK-WP-0038-T01
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "6470d6cd-c983-59c7-b13a-ba93672a3eda"
|
|
```
|
|
|
|
Support USER-WP-0029-T01/T02 (journey T06): /v1/identities/tenant-access changes only the target
|
|
tenant's users/admins groups, never deletes the identity, clears global suspension
|
|
or touches other tenants. Validate tenant/role/status; verify readback before
|
|
reporting success. Repeated desired-state requests converge. Preserve original
|
|
identity-wide owner operations for explicitly global use.
|
|
|
|
## Verify and publish the scoped provider contract
|
|
|
|
```task
|
|
id: NK-WP-0038-T02
|
|
status: done
|
|
priority: high
|
|
state_hub_task_id: "e36392f0-31e1-5e02-b2c0-e0efd8b15693"
|
|
```
|
|
|
|
Run provider regression and new isolation/readback/retry tests, build a pinned
|
|
image, update owner manifests and deploy before the portal uses this endpoint.
|
|
No live user lifecycle mutation is part of deployment verification. OTP provider
|
|
credentials remain a separate NK-WP-0033/KEY-WP-0035 dependency.
|
|
|
|
Provider regression: 20 tests passed, including tenant-group isolation, repeated
|
|
desired-state updates, failed readback/retry and preservation of global suspension.
|
|
CI now runs the provider suite for changes to identity-provisioner.
|
|
|
|
Deployed source a0cc947, image sha256:698620e25cabccd746c10c332030e436428d184baab0f8270936494d285216a6; Ready 1/1, live implementation confirmed. CI provider run 228 passed. Detailed receipt: user-engine/docs/evidence/2026-09-13-journey-release.md. Separate OTP work remains live in NK-WP-0033 and KEY-WP-0035; no OTP completion or real-user lifecycle mutation is claimed.
|