diff --git a/workplans/USER-WP-0035-onboarding-handoff-findings.md b/workplans/USER-WP-0035-onboarding-handoff-findings.md index 2e65dc3..0cd8532 100644 --- a/workplans/USER-WP-0035-onboarding-handoff-findings.md +++ b/workplans/USER-WP-0035-onboarding-handoff-findings.md @@ -49,14 +49,13 @@ No claim about password or factor state is added, and no delivery is claimed. ```task id: USER-WP-0035-T02 -status: wait -needs_human: true -decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483 -blocking_reason: "Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token)." +status: todo priority: high state_hub_task_id: "fae614ba-ffc0-511d-9d22-2d91fbab057f" ``` +2026-10-11: requalified — not a founder gate: the mail lane exists (EMAIL-WP-0004); implement the owner-supported setup-link delivery handoff and receipt evidence. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md (Round 3). + Finding 1: the setup link reaches the provider's screen only. A real handoff depends on the operator passing it on out of band. Closing this needs the governed transactional mail lane (`email-connect` plus the OpenBao delivery