From 35bf7c6e77872ab7b22a0caf53ada67e97cb355a Mon Sep 17 00:00:00 2001 From: custodian-sync Date: Sun, 11 Oct 2026 23:02:48 +0200 Subject: [PATCH] chore(consistency): sync task status from DB [auto] Updated by fix-consistency on 2026-10-11: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87 --- .custodian-brief.md | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/.custodian-brief.md b/.custodian-brief.md index a2a9a61..d466205 100644 --- a/.custodian-brief.md +++ b/.custodian-brief.md @@ -2,7 +2,7 @@ # Custodian Brief — user-engine **Domain:** communication -**Last synced:** 2026-10-09 13:53 UTC +**Last synced:** 2026-10-11 21:02 UTC **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)* ## Active Workstreams @@ -12,16 +12,16 @@ Progress: 1/3 done | workplan_id: `145df9d5-a7e9-5d20-8280-9d3ea069838b` **Open tasks:** - ! Connect authoritative application access `5d1bf977` - *(wait: Blocked on the provider-owned catalogue/admission and scoped grant/revocation contract from USER-WP-0026-T03.)* + *(wait: U09 reuses USER-WP-0026-T03 actual signed-in readback acceptance. T05 separately needs selection of the exact authoritative mutation fact and owner, then scoped mutation/revocation acceptance. Access readback delivers no generic grant API and FLEX-WP-0035 remains finished.)* - ! Complete optional OTP onboarding with provider evidence `40e46e52` - *(wait: Attended live acceptance of U05-U08 (enrollment, cancel, replace, lost-factor recovery, old-AAL1-session behavior) against the real provider factor before enabling live handoff; no stub acceptance.)* + *(wait: U05-U07 accepted in the attended run of 2026-10-11 (docs/evidence/2026-10-11-mfa-attended-u05-u08.md). U08 blocked by the recovery-preview defect KEY-WP-0040-T01; re-run steps 6.3 onwards after the fix with platform-root as operator. Also fix the vague 'sign-in service's recovery instructions' wording on /security (F3).)* ### Clear account state and complete user, tenant-admin and platform-admin journeys Progress: 4/6 done | workplan_id: `455300ca-ec1e-569e-a584-a8dcda2595cf` **Open tasks:** - ! Complete provider OTP activation and recovery path `9657abcb` - *(wait: Attended live acceptance of U05-U08/P04-P06 against the real provider factor (enrollment, cancellation, replacement, recovery, fresh login, privileged portal policy); the net-kingdom-privacyidea-admin-token route is still resolvable:false because railiance-platform has not published its OpenBao path/field/expiry contract.)* + *(wait: U05-U07 accepted 2026-10-11 (docs/evidence/2026-10-11-mfa-attended-u05-u08.md); P04 live recovery (U08) blocked by KEY-WP-0040-T01.)* - ! Validate all journeys across roles and applications `550886ca` *(wait: Full journey matrix needs authoritative application access (USER-WP-0026-T03), factor recovery (T04) and preserves VERGABE-WP-0019 real-user acceptance.)* @@ -30,14 +30,13 @@ Progress: 2/3 done | workplan_id: `0aea0a52-13f9-515b-bda8-665f8a4f2d5e` **Open tasks:** - ! Discover workload access from authoritative application records `95e9a6d4` - *(wait: Needs a provider-owned workload catalogue and application access decisions for the signed-in identity; the membership store cannot represent the allow list.)* + *(wait: Actual one-app catalogue/readback is verified. Initial discovery acceptance needs real signed-in account projection, not a generic Access grant API. Separate ordinary catalogue-management restoration remains on this task before customers, supported by bounded Access policy/claims proposal FLEX-IN-0003; do not reopen finished FLEX-WP-0035.)* ### Onboarding handoff findings from the 2026-09-23 operator run Progress: 1/2 done | workplan_id: `35aa6adf-255a-5705-9294-a50d98e45f00` **Open tasks:** -- ! Deliver the setup link to the recipient `fae614ba` - *(wait: Needs the operator-owned governed transactional mail lane (email-connect plus the OpenBao delivery token).)* +- · Deliver the setup link to the recipient `fae614ba` ### Read-only account authority for Hub integration Progress: 2/3 done | workplan_id: `54d99faf-4c53-5927-a82c-feca41de2cf3`