coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Name the login and sign-in address at onboarding handoff (USER-WP-0035-T01).
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Has been cancelled
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m13s
Details
Account journey acceptance / journeys (push) Successful in 10s
Details

Browse source 
From the 2026-09-23 operator run: recipients try the email address, and the
admin user entry gave no sign-in address to pass on.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 58902@bnt-lap001
Assistant-Session: 7ac7f865-2dc5-4aa7-8eb7-27a342109c2f
This commit is contained in:
tegwick 2026-09-23 22:10:38 +02:00
parent ab7cd3fd8e
commit ed69e97b86
3 changed files with 74 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

59
workplans/USER-WP-0035-onboarding-handoff-findings.md Normal file
View file

@ -0,0 +1,59 @@
---
id: USER-WP-0035
type: workplan
title: "Onboarding handoff findings from the 2026-09-23 operator run"
domain: communication
repo: user-engine
status: active
flavor: implementation
owner: claude-code
topic_slug: user-engine
created: "2026-09-23"
updated: "2026-09-23"
related: [USER-WP-0027, USER-WP-0028, NK-WP-0036, NK-WP-0041]
---
Intake for the net-kingdom findings from the human onboarding run on
2026-09-23 (NK-WP-0036-T05, net-kingdom@6c4fcaf; hub message 21b0b7e4).
Provider sign-in, Create login, single-use setup link, password set and
portal sign-in all worked. Three findings touch journeys U04 and T03 in
`docs/account-journeys.md`. This records them against user-engine; the
provider-side items stay with net-kingdom.
## Name the login and the sign-in address at every handoff point
```task
id: USER-WP-0035-T01
status: done
priority: high
```
Findings 2 and 3. The derived login name (`bernd.worsch-99` from a
plus-addressed mail) is not obvious to the recipient, users try the email
address first, and the tenant-admin user entry offered no sign-in address to
pass on. Plus-addressed email sign-in additionally fails at Authelia, which
net-kingdom tracks as NK-WP-0041-T02; user-engine must therefore not imply
that the email address works.
2026-09-23: the tenant-admin user entry now shows the sign-in address next to
the login name and states that the email address is not the login name. The
password-setup handoff page repeats the sign-in address for after the
password is set and says plainly that this portal does not deliver the link.
Regression coverage is in
`test_journey_roles.UserJourneys.test_password_handoff_names_actual_login_and_failure_can_retry`.
No claim about password or factor state is added, and no delivery is claimed.
## Deliver the setup link to the recipient
```task
id: USER-WP-0035-T02
status: wait
priority: high
```
Finding 1: the setup link reaches the provider's screen only. A real handoff
depends on the operator passing it on out of band. Closing this needs the
governed transactional mail lane (`email-connect` plus the OpenBao delivery
token) that SCOPE records as operator-owned; U04 and T02 in
`tests/journey-coverage.json` stay `external-blocked` until then. Do not
substitute a portal-rendered link for delivery evidence.