Record attended MFA run 2026-10-11: U05-U07 accepted, U08 blocked by KEY-WP-0040-T01; correct run doc
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1370019@bnt-lap001
Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
This commit is contained in:
tegwick 2026-10-11 23:02:23 +02:00
parent 2a2de76dfa
commit f1ed086da0
4 changed files with 58 additions and 6 deletions

View file

@ -65,12 +65,14 @@ Deployed source a9ff77d, image sha256:558e489f0b6e0b7160ab0d370560a66497e12488b9
```task
id: USER-WP-0027-T04
status: wait
needs_human: true
blocking_reason: "Attended-window item: founder real-factor run of U05-U08/P04-P06. UX accepted in principle (cef97ccd); findings become defects."
blocking_reason: "U05-U07 accepted 2026-10-11 (docs/evidence/2026-10-11-mfa-attended-u05-u08.md); P04 live recovery (U08) blocked by KEY-WP-0040-T01."
priority: high
depends_on: [KEY-WP-0040-T01]
state_hub_task_id: "9657abcb-690e-5323-8ff3-58253298ce7b"
```
2026-10-11: see USER-WP-0028-T03.
2026-10-11: requalified — cef97ccd resolved; live acceptance is an attended-window item. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
2026-10-03: depends_on targets terminal (C-40); re-qualified by CUST-WP-0075: KEY-WP-0035-T02/T03 are done (2026-09-13 custody activation superseded the owner-handoff gate) and NK-WP-0033 finished 2026-09-23 with the custody gap closed, so no owner return is outstanding from key-cape or net-kingdom. What remains is attended: live U05-U08/P04-P06 acceptance with a real OTP factor, and the net-kingdom-privacyidea-admin-token route still reports resolvable:false (owner railiance-platform, custody contract unpublished).

View file

@ -51,12 +51,14 @@ source, entry-point registry, identity/action mapping and mutation contract.
```task
id: USER-WP-0028-T03
status: wait
needs_human: true
blocking_reason: "Attended-window item: founder real-factor run of U05-U08. UX accepted in principle (cef97ccd); findings become defects."
blocking_reason: "U05-U07 accepted in the attended run of 2026-10-11 (docs/evidence/2026-10-11-mfa-attended-u05-u08.md). U08 blocked by the recovery-preview defect KEY-WP-0040-T01; re-run steps 6.3 onwards after the fix with platform-root as operator. Also fix the vague 'sign-in service's recovery instructions' wording on /security (F3)."
priority: high
depends_on: [KEY-WP-0040-T01]
state_hub_task_id: "40e46e52-31ac-5abd-8793-04c1b7b82df3"
```
2026-10-11: attended run done for U05-U07; U08 waits on key-cape KEY-WP-0040-T01. The re-run will need the founder again (attended window).
2026-10-11: requalified — cef97ccd resolved; live acceptance is an attended-window item. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
2026-10-03: depends_on targets terminal (C-40); re-qualified by CUST-WP-0075: KEY-WP-0035 and NK-WP-0033 are both finished (custody gap closed 2026-09-23), so credential custody is no longer the gate. What remains is attended live acceptance of U05-U08 with a real OTP factor; see USER-WP-0027-T04 for the still-unresolvable net-kingdom-privacyidea-admin-token route (owner railiance-platform).