ops-mason/docs
tegwick fca5591bc6 MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06)
verify-reuse-surface-hub-writer.py logs in with skip_browser=true and
shows the address (or opens a fresh temporary browser profile), so the
default Authelia session is never reused. The receipt records uid,
openbao_error and assurance per net-kingdom/docs/sign-in-diagnosis.md,
with tokens, codes and emails redacted. Capabilities come from
sys/capabilities-self on the lane token; no operator or root token is
read. Needs railiance-platform CCR-2026-0045 applied to run live.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1041694@bnt-lap001
Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52
2026-10-14 23:48:11 +02:00
..
evidence Record the passing hub-writer receipts. 2026-10-14 22:14:32 +02:00
reviews Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
construction-plan-format.md Require the SEC-DSM decision procedure on new credentials. 2026-10-11 23:41:31 +02:00
credential-owner-proposals-2026-10-09.md MASON-WP-0004-T01 done: founder rulings on tenant conflict and unclear paths 2026-10-09 11:02:47 +02:00
directory-group-binding.md Record bernd.worsch-3 and the group-ensure route. 2026-10-14 19:05:33 +02:00
executive-summary-format.md Review/optimize checklist, executive-summary format, build executor (T02-T04) 2026-07-27 00:56:34 +02:00
forgejo-consumer-eso-builder-review.md Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
forgejo-consumer-generated-ccr-refinement.json Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
forgejo-structural-materialization-source-v1.md Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
keycape-client-custody-attended-verification.md Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
kubernetes-plane.md Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
reuse-surface-hub-writer-attended.md MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
review-optimize-checklist.md Require the SEC-DSM decision procedure on new credentials. 2026-10-11 23:41:31 +02:00