diff --git a/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml b/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml index dd6882a..3755a61 100644 --- a/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml +++ b/credential-change-requests/CCR-2026-0055-net-kingdom-privacyidea-bind.yaml @@ -3,7 +3,7 @@ kind: credential-change-request schema_version: 1 request_type: attended-service-credential-delivery title: NetKingdom privacyIDEA resolver directory bind (svc-privacyidea) custody -status: approved +status: verified created: '2026-10-31' updated: '2026-10-31' requester: @@ -96,4 +96,14 @@ verification: custody copy and the write-through with pi-admin and an MFA login through the resolver. - Positive and negative results recorded in value-free receipts. - evidence: [] + evidence: + - at: '2026-10-31T10:19:36+00:00' + actor: founder (attended), claude-code guiding + kind: verifier_custody_and_write_through + result: passed + details: + - '2026-10-31: bind-lane.py setup (custody signs in to LLDAP as svc-privacyidea, + coding agents fenced, KV v1 CAS=0, no workload role) and verify passed; realm_bootstrap.py + --rotate-bind --from-openbao wrote BINDPW from OpenBao and admin passed token-backed + MFA through the resolver. Evidence: net-kingdom docs/evidence/2026-10-31-nk56-svc-privacyidea-bind/ + (ad7d1cd).'