the-custodian/docs/changes/netkingdom-target-2026-10-18/forgejo-current-token-r1/issuer-progress-request.json

7 lines
905 B
JSON

{
"summary": "Published KeyCape e2c5a947 exact online human ID/access-grant RS256 at_hash binding, legacy disabled profile unchanged; retains separate ID/resource audiences and no access-only fields in ID token. Full source race suite 726 passes including subtests, six existing native/external skips. Same compiled actual Forgejo provider/callback fails against old issuer and passes five fresh-process actual HTTPS PKCE/discovery/UserInfo/introspection/revocation scenarios against new issuer; mixed/revoked/suspended grants refuse. Synthetic MFA/PDP admission only. All six owner source postimages replay exact; primary/remote and all four task bindings verified. KEY42 independent review/native admission remain open; no native gate closed.",
"event_type": "note",
"author": "codex",
"workplan_id": "e2eecd1c-45c7-5a7c-bd1c-d31c845e3d38",
"task_id": "2cade51f-d25a-5719-96b4-b57d50c1b97d"
}