coulomb/user-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

USER-WP-0026-T03: retarget wait to access-engine per net-kingdom ownership answer
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 445231@bnt-lap001
Assistant-Session: 024a807e-0cc5-4f2c-bc8a-b83322d1395d
This commit is contained in:
tegwick 2026-10-09 11:42:55 +02:00
parent 67a996999e
commit 3854e8b71f
1 changed files with 14 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

17
workplans/USER-WP-0026-account-recovery.md
View file

@ -9,7 +9,7 @@ flavor: implementation
owner: codex
topic_slug: user-engine
created: "2026-09-12"
updated: "2026-10-03"
updated: "2026-10-09"
state_hub_workstream_id: "0aea0a52-13f9-515b-bda8-665f8a4f2d5e"
---
@ -62,8 +62,8 @@ logout. This does not accept the remaining multi-user Vergabe pilot.
```task
id: USER-WP-0026-T03
status: wait
blocked_on: message-from:net-kingdom
blocking_reason: "Needs a provider-owned workload catalogue and application access decisions for the signed-in identity; the membership store cannot represent the allow list."
blocked_on: message-from:access-engine
blocking_reason: "Needs access-engine's per-identity decision/grant/revocation/readback contract and a readable protected-system registry (with key-cape client binding) as the workload catalogue; the membership store cannot represent the allow list."
priority: high
state_hub_task_id: "95e9a6d4-7e57-5483-97c5-3f4a45bb6767"
```
@ -76,6 +76,17 @@ never turn a tenant membership, platform role, application registration or a
missing access record into an inferred grant. Current UI displays recorded
workload memberships only; no complete fleet entitlement inventory is claimed.
2026-10-09: net-kingdom answered (hub message 19a0cbcd, 2026-10-03) that it
owns neither record. Decisions, scoped grants, revocation and readback belong to
access-engine, the only PDP. The workload catalogue is the binding of three
records: access-engine protected-system registration, key-cape OIDC client
(entry points) and the user-engine application record. A workload is listed
only when all three exist and are bound. "Unavailable" is the PEP outcome when
no decision is returned, never an inferred allow. Wait retargeted to
access-engine. Ask filed for the decision/readback contract and a readable
protected-system registry. If access-engine declines, return to net-kingdom
for an orchestration workplan.
### Live recovery rollout — 2026-09-12
Recovery is deployed in KeyCape 4d8b8fe, User Engine e54b6ee and Vergabe c067993