coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record registration rollout gate
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-08-10 17:02:54 +02:00
parent d3b3266c62
commit cccca324c1
3 changed files with 18 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
WORK-RECORDS.md
View file

@ -160,8 +160,8 @@
| task | USER-WP-0021-T03 | done | — | workplans/USER-WP-0021-portal-product-expansion.md | | task | USER-WP-0021-T03 | done | — | workplans/USER-WP-0021-portal-product-expansion.md |
| task | USER-WP-0021-T04 | done | — | workplans/USER-WP-0021-portal-product-expansion.md | | task | USER-WP-0021-T04 | done | — | workplans/USER-WP-0021-portal-product-expansion.md |
| task | USER-WP-0021-T05 | wait | — | workplans/USER-WP-0021-portal-product-expansion.md | | task | USER-WP-0021-T05 | wait | — | workplans/USER-WP-0021-portal-product-expansion.md |
| task | USER-WP-0022-T01 | wait | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md | | task | USER-WP-0022-T01 | progress | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md |
| task | USER-WP-0022-T02 | wait | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md | | task | USER-WP-0022-T02 | done | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md |
| task | USER-WP-0022-T03 | cancel | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md | | task | USER-WP-0022-T03 | cancel | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md |
| task | USER-WP-0022-T04 | cancel | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md | | task | USER-WP-0022-T04 | cancel | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md |
| task | USER-WP-0022-T05 | todo | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md | | task | USER-WP-0022-T05 | progress | — | workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md |

8
workplans/USER-WP-0021-portal-product-expansion.md
View file

@ -8,7 +8,7 @@ status: active
owner: codex owner: codex
topic_slug: netkingdom topic_slug: netkingdom
created: "2026-07-30" created: "2026-07-30"
updated: "2026-08-08" updated: "2026-08-10"
depends_on: depends_on:
- USER-WP-0020 - USER-WP-0020
state_hub_workstream_id: "ba217f48-5fa5-4178-9c79-73aa225f3f2e" state_hub_workstream_id: "ba217f48-5fa5-4178-9c79-73aa225f3f2e"
@ -193,3 +193,9 @@ also deployed and has live self-service-allow/cross-tenant-deny evidence, but
the portal runtime switch remains gated on approved event and mail receivers. the portal runtime switch remains gated on approved event and mail receivers.
T01 remains open only for broader tenant update/retirement operations and the T01 remains open only for broader tenant update/retirement operations and the
final outbox transport activation. final outbox transport activation.
2026-08-10 rollout evidence: the current source image now fails closed when
the required flex-auth and delivery settings are absent. A guarded deployment
was restored to the last known-good revision without service loss. Final T01
activation remains blocked on approved OpenBao audit/mail receiver tokens and
transactional SMTP credentials; no placeholder or reused credential was added.

8
workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md
View file

@ -75,6 +75,14 @@ Responses remain non-enumerating. The full suite passes 128 tests with three
environment-dependent skips. Cancellation, ingress rate limiting, and the environment-dependent skips. Cancellation, ingress rate limiting, and the
credential-gated production enablement remain. credential-gated production enablement remain.
The tested UI image is published at
`forgejo.coulomb.social/coulomb/user-engine@sha256:2fdb60eec093a8c8a0bff1736ab515916cefac49348c0098d308728b72ab3594`.
A guarded rollout correctly failed closed because the production manifest does
not yet supply the required flex-auth/event delivery runtime configuration; the
last known-good revision was restored and remained available. Do not activate
this image or public registration until the OpenBao delivery and verification
tokens plus transactional SMTP lane are installed.
## T02 - Orchestrate provider identity creation ## T02 - Orchestrate provider identity creation
```task ```task