coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the hub-writer member entity.

Browse source 
bernd.worsch-3 is OpenBao entity f94b7c34-e151-30bb-b473-df3ccdbb9bf1. The member receipt must be that entity. T02 is done. The filed role stays unconfirmed until CCR-2026-0044 is approved.

Assistant: grok
Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6
This commit is contained in:
tegwick 2026-10-14 19:36:52 +02:00
parent c54193ae24
commit a7f9516bb3
6 changed files with 44 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/reuse-surface-hub-writer-attended.md
View file

@ -8,8 +8,9 @@ Plan: `plans/reuse-surface-hub-writer.md`. Filed request:
Run this only after CCR-2026-0044 is approved and applied. LLDAP group
`reuse-surface-hub-writers` exists with member `bernd.worsch-3`, and that
user enrolled a second factor on 2026-10-14. `member` still has to be a
login that KeyCape marks `/assurance/level=aal2`. The member must not be
OpenBao entity `4a1f663c-0621-0483-edd0-f852274f4b6b`. Later groups of this
login that KeyCape marks `/assurance/level=aal2`. The member entity is
`f94b7c34-e151-30bb-b473-df3ccdbb9bf1`. A token for
`4a1f663c-0621-0483-edd0-f852274f4b6b` fails. Later groups of this
shape go through
identity-provisioner `POST /v1/groups/ensure`; see
`docs/directory-group-binding.md`.