coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record verified enrollment assurance release and automate provider contract tests
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
This commit is contained in:
tegwick 2026-09-13 17:03:44 +02:00
parent a219b90c03
commit f532324460
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/USER-WP-0030-platform-admin-journeys.md
View file

@ -80,3 +80,12 @@ offline tests pass and exact-commit CI is configured. This supersedes the earlie
missing-owner gate for factor reads. T03 remains in progress for P04 audited
factor/account recovery, P05 notification operations and remaining expiry drills,
and P06 scoped policy/onboarding acceptance. Historical NK-WP-0033 is separate.
2026-09-13 assurance follow-up: KeyCape 113f3a6 is released with confirmed-enrollment
state handling, TOTP/HOTP serial/type evidence required for AAL2, and an inert
realm-visibility probe before accepting no-factor responses. This closes three
policy failure modes found while implementing P06. Native probe and full Go
suites passed; installed-provider isolated tests verify enrollment/cancellation,
permission withdrawal/recovery and genuine JWT expiry. Evidence is
key-cape/docs/enrollment-assurance-release-2026-09-13.md. P04 audited lost-factor
recovery and P06 actual optional-client/self-service activation remain T03.