From a704a72b6ed988ff630323998993838c15a3d446 Mon Sep 17 00:00:00 2001 From: codex Date: Sun, 13 Sep 2026 21:19:13 +0200 Subject: [PATCH] Record completed P04 recovery rollout and acceptance Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c --- docs/keycape-factor-recovery.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/docs/keycape-factor-recovery.md b/docs/keycape-factor-recovery.md index 84af686..df5ec16 100644 --- a/docs/keycape-factor-recovery.md +++ b/docs/keycape-factor-recovery.md @@ -1,4 +1,18 @@ -# Attended lost-factor recovery +# Supported platform lost-factor recovery + +Routine P04 recovery is now available at +https://users.coulomb.social/platform/factor-recovery. Sign in with recent MFA as +a platform operator. The private provider service verifies that signed identity; +no OpenBao login or provider credential handoff is required. Use the page to +preview an exact login/factor, confirm identity verification and shared scope, +apply recovery, and look up the audit result by support reference. + +Release evidence: user-engine/docs/evidence/2026-09-13-p04-recovery.md. +The OpenBao/Kubernetes CLI described below is a historical implementation step, +not the supported routine P04 path. Its unperformed native acceptance was +cancelled when the signed-session service replaced it (KEY-WP-0036-T02). + +# Historical attended owner procedure Implementation tracked by KEY-WP-0036 and USER-WP-0030-T03. Provider-local recovery passes isolated tests; the attended production wrapper and portal