coulomb/ops-mason
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the second factor on bernd.worsch-3.

Browse source 
The hub-writer member has enrolled MFA. T02 still waits on the OpenBao entity id before bound_claims_confirmed can move.

Assistant: grok
Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6
This commit is contained in:
tegwick 2026-10-14 19:24:14 +02:00
parent 100558696f
commit c54193ae24
4 changed files with 18 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/reuse-surface-hub-writer-attended.md
View file

@ -5,12 +5,12 @@ Plan: `plans/reuse-surface-hub-writer.md`. Filed request:
(proposed). Source copy:
`builds/reuse-surface-hub-writer/credential-change-requests/CCR-DRAFT-REUSE-SURFACE-HUB-WRITER.yaml`.
Run this only after CCR-2026-0044 is approved and applied, and after the
founder has created LLDAP group `reuse-surface-hub-writers` with member
`bernd.worsch-3`. That user still has to enroll a second factor at
`https://pink-account.coulomb.social/` before `member` can pass: the role
requires `/assurance/level=aal2`. The member must not be OpenBao entity
`4a1f663c-0621-0483-edd0-f852274f4b6b`. Later groups of this shape go through
Run this only after CCR-2026-0044 is approved and applied. LLDAP group
`reuse-surface-hub-writers` exists with member `bernd.worsch-3`, and that
user enrolled a second factor on 2026-10-14. `member` still has to be a
login that KeyCape marks `/assurance/level=aal2`. The member must not be
OpenBao entity `4a1f663c-0621-0483-edd0-f852274f4b6b`. Later groups of this
shape go through
identity-provisioner `POST /v1/groups/ensure`; see
`docs/directory-group-binding.md`.