diff --git a/credential-change-requests/CCR-2026-0057-net-kingdom-synthetic-journey-identity.yaml b/credential-change-requests/CCR-2026-0057-net-kingdom-synthetic-journey-identity.yaml index 3be7878..bbf29cc 100644 --- a/credential-change-requests/CCR-2026-0057-net-kingdom-synthetic-journey-identity.yaml +++ b/credential-change-requests/CCR-2026-0057-net-kingdom-synthetic-journey-identity.yaml @@ -4,7 +4,7 @@ schema_version: 1 request_type: attended-service-credential-delivery title: NetKingdom synthetic journey identity (syn-journey) password and TOTP seed custody -status: approved +status: verified created: '2026-10-31' updated: '2026-10-31' requester: @@ -110,4 +110,16 @@ verification: before lane.py verify. - Attended platform-admin (aal2) session; the founder runs setup and verify. - Positive and negative results recorded in value-free receipts. - evidence: [] + evidence: + - at: '2026-10-31T12:33:37+00:00' + actor: founder (attended), claude-code guiding + kind: verifier_identity_custody_and_journey + result: passed + details: + - '2026-10-31: KeyCape client nk-synthetic-journey registered (SecurityCase accepted, + net-kingdom d654f8a); lane.py setup (coding agents fenced, syn-journey with + no groups, TOTP token SYNJOURNEY01 with a privacyIDEA-generated key confirmed + by code, KV v1 CAS=0, no workload role) and verify (KV current by LLDAP sign-in, + live synthetic journey passed at aal2 with otp) passed. One partial setup removed + by lane.py teardown first. Evidence: net-kingdom docs/evidence/2026-10-31-nk56-t09-synthetic-identity/ + (661ab6a).'