Record verified P05 rollout and service recovery acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Account journey acceptance / journeys (push) Successful in 6s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 22:31:16 +02:00
parent 5764c01ce6
commit 38b041385e
5 changed files with 129 additions and 8 deletions

View file

@ -105,3 +105,11 @@ rolled out and replacement TOTP possession confirmation is active. Evidence:
docs/evidence/2026-09-13-p04-recovery.md. Positive recovery uses disposable-provider
acceptance; no real user's factor was disabled. T03 remains in progress only for
P05 and P06 scope; routine P04 no longer needs an OpenBao owner handoff.
2026-09-13 P05 completed via USER-WP-0032: checked component health, controlled
single-record delivery, durable uncertain-outcome reservations, per-event DB
serialization, provider evidence and clear assisted recovery. All source/image
CI and deployment/non-sending live checks passed. RPF-WP-0040 expiry/recovery
acceptance is finished. Evidence: docs/evidence/2026-09-13-p05-service-operations.md.
T03 now remains in progress for P06 only; notification/credential P05 is closed.

View file

@ -4,11 +4,12 @@ type: workplan
title: "P05 checked service health and bounded delivery recovery"
domain: communication
repo: user-engine
status: active
status: finished
owner: codex
topic_slug: communication
created: "2026-09-13"
updated: "2026-09-13"
state_hub_workstream_id: "35af93fc-17ed-548e-8da7-616e44e8eee0"
---
Complete P05 under USER-WP-0030-T03. P06 remains separate. Do not send production
@ -19,8 +20,9 @@ authentication diagnostics do not submit a message or claim inbox delivery.
```task
id: USER-WP-0032-T01
status: progress
status: done
priority: high
state_hub_task_id: "0c9ebc81-ea7c-597e-a908-2806e5a8c57f"
```
Operator-only, bounded checks for KeyCape dependencies/current factor-read
@ -32,8 +34,9 @@ provider errors. Health probes must not send mail.
```task
id: USER-WP-0032-T02
status: progress
status: done
priority: high
state_hub_task_id: "6be221b9-5378-54a9-ae12-37a52cc9e186"
```
Fix failed worker claims; serialize event operations across connections; confirm
@ -46,8 +49,9 @@ processing of the production backlog during this task.
```task
id: USER-WP-0032-T03
status: todo
status: done
priority: high
state_hub_task_id: "5ee8bb39-e725-592e-baf2-04063c579ccd"
```
Installed-provider genuine JWT expiry, scope withdrawal/recovery and outage;
@ -55,3 +59,16 @@ native renewal/projection; SMTP/IMAP received-message and retry tests with a
local mailbox; role/CSRF/stale/ambiguous-outcome browser coverage. Publish digest
pinned releases and verify live non-sending status. Close RPF-WP-0040 acceptance
using its specified isolated fixture rather than disrupting live authentication.
Completed 2026-09-13. Evidence: docs/evidence/2026-09-13-p05-service-operations.md.
227 portal tests with disposable PostgreSQL, 23 browser checks, 89 email tests,
real local SMTP/IMAP one-message retry reconciliation, installed-provider expiry /
permission recovery and native credential rotation passed. Three exact-commit
CI image releases are deployed and all six live component checks pass without
sending production mail. The invitation URL and historical Never-pull drift
are corrected in live and canonical configuration.
Residuals already have live owners before closure: P06 is USER-WP-0030-T03 /
KEY-WP-0035; actual user inbox/acceptance journeys remain USER-WP-0028, and the
historical resolver incident remains NK-WP-0033. P05 does not claim these done.