diff --git a/docs/keycape-factor-recovery.md b/docs/keycape-factor-recovery.md index 84af686..df5ec16 100644 --- a/docs/keycape-factor-recovery.md +++ b/docs/keycape-factor-recovery.md @@ -1,4 +1,18 @@ -# Attended lost-factor recovery +# Supported platform lost-factor recovery + +Routine P04 recovery is now available at +https://users.coulomb.social/platform/factor-recovery. Sign in with recent MFA as +a platform operator. The private provider service verifies that signed identity; +no OpenBao login or provider credential handoff is required. Use the page to +preview an exact login/factor, confirm identity verification and shared scope, +apply recovery, and look up the audit result by support reference. + +Release evidence: user-engine/docs/evidence/2026-09-13-p04-recovery.md. +The OpenBao/Kubernetes CLI described below is a historical implementation step, +not the supported routine P04 path. Its unperformed native acceptance was +cancelled when the signed-session service replaced it (KEY-WP-0036-T02). + +# Historical attended owner procedure Implementation tracked by KEY-WP-0036 and USER-WP-0030-T03. Provider-local recovery passes isolated tests; the attended production wrapper and portal