USER-WP-0028-T03: prepare attended U05-U08 MFA run for tegwick
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 48s
Account journey acceptance / journeys (push) Failing after 6s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 629164@bnt-lap001
Assistant-Session: 22dee475-6a23-47f3-8588-00a7f62d8720
This commit is contained in:
tegwick 2026-10-10 00:45:03 +02:00
parent 869de4080b
commit 80a6204f7e
2 changed files with 93 additions and 0 deletions

View file

@ -84,3 +84,10 @@ the issuer plus user-engine. Admin-required MFA is deferred and would be an
issuer-side client policy. The attended run accepts U05-U08 for a coulomb-social user:
optional enrollment, then return, then lost-factor recovery. cef97ccd stays open for
that acceptance.
2026-10-10: founder asked (via ops-mason, hub ab89a591) for self-service MFA
setup for all users, with tegwick as the first attended run. The run is
prepared in docs/mfa-attended-run.md. It covers the start point, the attended
steps, evidence rules (no seeds, codes or QR), the handoff URL and what stays
deferred. It needs the founder's go to set USER_ENGINE_MFA_MANAGEMENT_URL, and
a decision on whether tegwick joins the coulomb-social pilot.