ops-mason/tests
tegwick fca5591bc6 MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06)
verify-reuse-surface-hub-writer.py logs in with skip_browser=true and
shows the address (or opens a fresh temporary browser profile), so the
default Authelia session is never reused. The receipt records uid,
openbao_error and assurance per net-kingdom/docs/sign-in-diagnosis.md,
with tokens, codes and emails redacted. Capabilities come from
sys/capabilities-self on the lane token; no operator or root token is
read. Needs railiance-platform CCR-2026-0045 applied to run live.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1041694@bnt-lap001
Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52
2026-10-14 23:48:11 +02:00
..
test_attended_login.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00
test_bao_session.py MASON-WP-0009-T04 done: live capability verification of the KeyCape secrets-engine-openbao lane 2026-10-07 13:47:14 +02:00
test_case_build.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_case_plan.py Prepare typed structural evidence without credential success circularity 2026-10-11 02:42:57 +02:00
test_case_structure.py Prepare reviewed Forgejo consumer ESO scope and truthful recovery records 2026-10-11 04:09:26 +02:00
test_custody_describe.py MASON-WP-0004-T02: 27/29 descriptions applied; clip to OpenBao's byte limit 2026-10-09 12:09:52 +02:00
test_custody_inventory.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_executor.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_keycape_client_custody_verifier.py Prepare independently reviewed native custody capability verification 2026-10-11 14:16:58 +02:00
test_kubernetes_plane.py Enforce readiness tiers and reconcile blocked workplans 2026-09-28 11:40:57 +02:00
test_oidc_matrix.py MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane 2026-10-08 23:41:34 +02:00
test_plan.py Bind OpenBao builds to approved inputs and secure credential delivery 2026-09-28 11:55:39 +02:00
test_plan_survey.py Replace ops-mason-build with read-only ops-mason-survey grant (MASON-IN-0004) 2026-10-07 10:44:24 +02:00
test_reuse_surface_hub_writer.py MASON-WP-0012: named-role login without session reuse, diagnosis receipt, capabilities-self proof (NK-WP-0051-T06) 2026-10-14 23:48:11 +02:00