coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

USER-WP-0026-T03: record signed-in readback (correct deny for tegwick)
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
Details
CI Smoke / container-smoke (push) Waiting to run
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
This commit is contained in:
tegwick 2026-10-11 23:13:51 +02:00
parent 659549582b
commit 2bca9e8d66
2 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

23
docs/evidence/2026-10-11-signed-in-application-readback.md Normal file
View file

@ -0,0 +1,23 @@
# Signed-in application access readback — tegwick — 2026-10-11
Task: USER-WP-0026-T03 (signed-in account projection). Operator: founder. Coached by: Claude Code.
| Time (local) | Account | Assurance | Observation |
|---|---|---|---|
| ~23:00 | tegwick | password + OTP (TOTP …E1D), fresh private window | users.coulomb.social account page, section "Application access": **"Informed Decision - Not available"**, followed by the standard note ("Checked with the access service for your current sign-in… not a complete inventory") |
## Assessment
- Readback is live end to end. user-engine asked access-engine (`application.access`,
`purpose=readback`) for the signed-in subject and rendered the answer. The informed-decision
binding is present: a three-way catalogue entry exists.
- **Correct deny.** The informed-decision rule allows only net-kingdom-admins with AAL2 pwd+otp
within 12 h on `tenant:platform`. The founder confirmed that tegwick is an ordinary day-to-day
account, not meant to author decisions. No access was inferred from tenant membership.
- Not shown: "could not be checked" (transport healthy).
## Remaining for USER-WP-0026-T03
- Positive path: one admin account in net-kingdom-admins (for example platform-root) should see
"Informed Decision - Available". This is an attended check of about 2 minutes.
- Ordinary catalogue-management restoration before customers (FLEX-IN-0003), unchanged.

4
workplans/USER-WP-0026-account-recovery.md
View file

@ -63,11 +63,13 @@ logout. This does not accept the remaining multi-user Vergabe pilot.
id: USER-WP-0026-T03
status: wait
needs_human: true
blocking_reason: "Actual one-app catalogue/readback is verified. Initial discovery acceptance needs real signed-in account projection, not a generic Access grant API. Separate ordinary catalogue-management restoration remains on this task before customers, supported by bounded Access policy/claims proposal FLEX-IN-0003; do not reopen finished FLEX-WP-0035."
blocking_reason: "Signed-in readback live and correct for the deny path (tegwick: Informed Decision - Not available, founder-confirmed correct; docs/evidence/2026-10-11-signed-in-application-readback.md). Remaining: attended positive check with a net-kingdom-admins account (expect Available), then catalogue-management restoration before customers (FLEX-IN-0003)."
priority: high
state_hub_task_id: "95e9a6d4-7e57-5483-97c5-3f4a45bb6767"
```
2026-10-11: deny-path acceptance recorded; positive-path check stays on the attended-window checklist.
The requested cross-application allow list is not represented by the current
User Engine membership store. Establish a provider-owned workload catalogue and
read current application access decisions for the signed-in identity. Link only