coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record and pin verified account journey release
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 12:29:43 +02:00
parent 502a8e01d7
commit 62d6f8b0c7
7 changed files with 413 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
workplans/USER-WP-0029-tenant-admin-journeys.md
View file

@ -9,6 +9,7 @@ owner: codex
topic_slug: communication
created: "2026-09-13"
updated: "2026-09-13"
state_hub_workstream_id: "23963e14-255d-5935-b3d9-423e6f67f1d8"
---
Implements docs/account-journeys.md under USER-WP-0027. A passing local
@ -20,6 +21,7 @@ suite is not evidence that an external provider flow works live.
id: USER-WP-0029-T01
status: done
priority: high
state_hub_task_id: "c22c389c-0ee8-5f96-bd83-f584d29fce6e"
```
T01/T03/T04/T06: reject non-admin and wrong-tenant user IDs before provisioning/recovery/lifecycle calls; bind invitation operations to route tenant; protect shared identities from global tenant-scoped mutation.
@ -30,6 +32,7 @@ T01/T03/T04/T06: reject non-admin and wrong-tenant user IDs before provisioning/
id: USER-WP-0029-T02
status: done
priority: high
state_hub_task_id: "ce241cf7-b2fc-505c-a3e6-644ddb6689e9"
```
T06/T08: preview target/scope/action, CSRF-bound confirmation, reject stale state and last-admin removal, provide cancel and recovery. Keep domain/API guards as well as UI checks. Document concurrency/external propagation limits.
@ -40,6 +43,7 @@ T06/T08: preview target/scope/action, CSRF-bound confirmation, reject stale stat
id: USER-WP-0029-T03
status: done
priority: high
state_hub_task_id: "74664b6b-cc98-5332-a0d0-6a1a09a55556"
```
T02/T03/T04/T07: show actual directory login separately from display name, account state, provider uncertainty, invitation delivery status and appropriate next steps; prevent duplicate rows from workload memberships.