coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close portal MVP and preserve expansion backlog
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-30 00:52:50 +02:00
parent 5be206420c
commit 6d64ec2ccf
3 changed files with 124 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

33
workplans/USER-WP-0020-self-service-and-user-administration-portal.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Production self-service and user administration portal"
domain: communication
repo: user-engine
status: active
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-07-27"
@ -54,7 +54,7 @@ metadata for that later stage.
```task
id: USER-WP-0020-T02
status: progress
status: done
priority: high
state_hub_task_id: "fdb0c322-3efe-4077-bfba-1648787ef411"
```
@ -85,7 +85,7 @@ breadth and OpenAPI/outbox delivery keep this task in progress.
```task
id: USER-WP-0020-T03
status: progress
status: done
priority: high
state_hub_task_id: "45ed1485-003d-4e5f-99fb-91b1b430f3fa"
```
@ -109,7 +109,7 @@ accessibility breadth remain.
```task
id: USER-WP-0020-T04
status: progress
status: done
priority: high
state_hub_task_id: "16555b68-17ef-4902-bd30-f9a0cfe10f9e"
```
@ -175,7 +175,7 @@ identity reconciliation passed. No secret value entered recorded evidence.
```task
id: USER-WP-0020-T06
status: wait
status: done
priority: high
state_hub_task_id: "39dc383c-7213-495d-8e12-58e614706afe"
```
@ -251,7 +251,7 @@ open `tenant:platform` and `tenant:coulomb` administration were both denied.
```task
id: USER-WP-0020-T08
status: wait
status: done
priority: medium
state_hub_task_id: "ecbdeef3-a0a9-40d6-9722-5cc650d78a49"
```
@ -261,3 +261,24 @@ passes. Record enterprise federation follow-up triggers: customer demand for
SAML/OIDC federation, SCIM, directory synchronization, just-in-time
provisioning, or customer-owned identity lifecycle. Do not pre-implement
those integrations here.
## Milestone closure (2026-07-30)
The production Binky MVP is complete and live. Its API covers verified current
user, registration start/completion, tenant-scoped paginated membership
listing, user creation, provider-neutral provisioning, and suspend/reactivate
lifecycle with structured errors, correlation, idempotency gates, durable
transactions, audit, and outbox records. Its browser journey covers KeyCape
sign-in, provider-owned password setup and MFA, tenant administration, and
CSRF-protected lifecycle management.
Acceptance evidence includes AAL2 login, platform/unrelated-tenant denial,
provider drift and reconciliation, replay-safe deletion, secret rotation,
database restore, and deployment rollback/roll-forward. Broader invitation and
platform recovery APIs, expanded onboarding/administration UX, automated
outbox delivery, and the full accessibility/provider-outage matrix transfer to
`USER-WP-0021`; they are not silently treated as implemented here.
Enterprise federation remains trigger-driven. Create a separate implementation
plan only when a tenant requires SAML/OIDC federation, SCIM, directory
synchronization, just-in-time provisioning, or customer-owned lifecycle.