tegwick fca5591bc6 MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) ... verify-reuse-surface-hub-writer.py logs in with skip_browser=true and shows the address (or opens a fresh temporary browser profile), so the default Authelia session is never reused. The receipt records uid, openbao_error and assurance per net-kingdom/docs/sign-in-diagnosis.md, with tokens, codes and emails redacted. Capabilities come from sys/capabilities-self on the lane token; no operator or root token is read. Needs railiance-platform CCR-2026-0045 applied to run live. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52		2026-10-14 23:48:11 +02:00
..
bao-session.sh	bao-session.sh login: never print the operator token	2026-10-08 23:52:43 +02:00
custody-describe.py	MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit	2026-10-09 12:09:52 +02:00
custody-inventory.py	Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004)	2026-10-07 10:44:24 +02:00
plan-survey.py	Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004)	2026-10-07 10:44:24 +02:00
verify-fluid-telegram-lane.sh	verify-fluid-telegram-lane: clear message when the member login is refused	2026-10-09 20:10:43 +02:00
verify-keycape-client-custody.py	Prepare independently reviewed native custody capability verification	2026-10-11 14:16:58 +02:00
verify-reuse-surface-hub-writer.py	MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06)	2026-10-14 23:48:11 +02:00