289 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	adf6e992a6	Add opt-in tenant-to-client bindings for invitation mail ... User-engine side of EMAIL-WP-0008: USER_ENGINE_MAIL_CLIENT_BINDINGS maps tenant globs to a single client_id carried on invitation mail envelopes only. Unmatched or conflicting tenants fail as mail_binding_denied before either lane is contacted, and the outbox now records that reason instead of collapsing it to delivery_unavailable. Unset keeps legacy envelopes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 445231@bnt-lap001 Assistant-Session: 024a807e-0cc5-4f2c-bc8a-b83322d1395d	2026-10-09 11:21:17 +02:00
custodian-sync	a9360842f8	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-04: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091	2026-10-04 01:09:30 +02:00
tegwick	ad501d032c	CUST-WP-0075: reconcile owner waits and decision routing ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091	2026-10-04 00:48:22 +02:00
tegwick	d955cd7acd	Refresh generated work records after custody acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:40:13 +02:00
custodian-sync	072cc3517b	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:39:37 +02:00
tegwick	608cbff477	Complete live empty custody consumer acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 20:39:15 +02:00
custodian-sync	f85c9681a7	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:56:36 +02:00
tegwick	ae973142fd	Record approved empty custody bootstrap and source delivery receipt ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:56:11 +02:00
tegwick	0d0751d39d	Implement authenticated custody observations and durable root-grant baseline ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:50:15 +02:00
custodian-sync	1999a144c9	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 19:00:10 +02:00
tegwick	c11c290290	Prepare custody observation adapter pending authenticated owner delivery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:58:57 +02:00
custodian-sync	22eef7f902	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29	2026-10-03 18:58:09 +02:00
custodian-sync	44ed6d5860	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:58:12 +02:00
custodian-sync	0c3fd325a9	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:41:33 +02:00
tegwick	3085576de5	CUST-WP-0075 inbox sweep: act on net-kingdom reply to USER-WP-0026/0037 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:41:16 +02:00
tegwick	761453e842	CUST-WP-0075-T03: route human gates to hub decisions ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:35:47 +02:00
custodian-sync	6680964fd4	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-03: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: fable Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:10:58 +02:00
tegwick	f7fdd2ec42	CUST-WP-0075-T02: re-qualify satisfied waits in USER-WP-0027-T04, USER-WP-0028-T03 ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: fable Assistant-Process: 3775@bnt-lap001 Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3	2026-10-03 03:10:10 +02:00
tegwick	311e166c37	Minor update	2026-10-03 00:30:34 +02:00
custodian-sync	290e4b99ed	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-30: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 101414@bnt-lap001 Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6	2026-09-30 18:56:33 +02:00
tegwick	34cdcdeaf1	USER-WP-0034: repoint blueprint source path to access-engine; finished ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 101414@bnt-lap001 Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6	2026-09-30 18:54:56 +02:00
custodian-sync	a164a67122	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-29: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-29 00:25:25 +02:00
custodian-sync	0b22da6000	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-28: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:47:03 +02:00
tegwick	0d554dcea2	Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R8 identity custody) ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:43:56 +02:00
custodian-sync	3ed0dbd98a	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-28: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:19:46 +02:00
tegwick	b08b2d7f32	Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root FLEX-WP-0020) ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:16:51 +02:00
custodian-sync	65e4c1baa5	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-28: - update .custodian-brief.md for user-engine Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 227621@bnt-lap001 Assistant-Session: ffcc35e9-8ffa-4881-a473-02ca94d6b366	2026-09-28 20:20:29 +02:00
tegwick	2252b4ca6d	feat: add workload-authenticated account-authority HTTP lookup (USER-WP-0037-T03 partial) ... Exposes POST /api/v1/platform/account-authority/lookup over the existing lookup_account_authority service method, gated by a dedicated Hub workload bearer distinct from end-user OIDC claims and the trusted proxy secret. The route is absent unless USER_ENGINE_HUB_AUTHORITY_TOKEN is configured. T02 (root-grant custody/mapping) and the remainder of T03 (real workload credential admission) depend on decisions outside this repo, per credential-routing.md and NetKingdom's root-custody canon. Requested via State Hub messages to net-kingdom and state-hub; workplan set to blocked. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 227621@bnt-lap001 Assistant-Session: ffcc35e9-8ffa-4881-a473-02ca94d6b366	2026-09-28 20:20:07 +02:00
tegwick	e82ace9b4d	docs: record authority lookup State Hub bindings ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 18:21:02 +02:00
custodian-sync	9e016c5296	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-28: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 18:19:35 +02:00
tegwick	686da7c6bb	feat: add authorized account lookup without provisioning ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 18:18:42 +02:00
tegwick	b4cef6446b	chore(consistency): sync hub ids and work records [auto] ... Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 169987@bnt-lap001 Assistant-Session: 322ef1ef-9048-4021-8570-b6d6f6347999	2026-09-27 21:37:31 +02:00
tegwick	8b3b72fcb2	File USER-IN-0002: reusable account/session-status UI component ... Operator ran into an extended, opaque troubleshooting session in informed-decision: the decision overview uses a 12h MFA-freshness window while opening a memo to review/approve uses a strict 900s window, so the overview kept working while every review page silently refused, with no session-status visibility and no logout affordance in that app's UI to diagnose or recover from it. Requests a reusable account/session-status component (identity, assurance freshness, logout) that informed-decision, vergabe-teilnahme and other consumer UIs can mount, built against user-engine's identity/assurance model. Notes USER-WP-0036 as directly reusable prior art, and flags -- as a remark, not a decision -- that the actual component likely belongs in a distinct small repository rather than in headless user-engine itself or vendored per consumer, to avoid coupling every consumer's frontend build to user-engine's release cycle. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 169987@bnt-lap001 Assistant-Session: 322ef1ef-9048-4021-8570-b6d6f6347999	2026-09-27 21:36:58 +02:00
tegwick	4fc08eb492	Refresh State Hub brief after loose-end reconciliation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e38e-e5bb-7b50-968d-a738a0294997	2026-09-27 17:56:06 +02:00
tegwick	eca7c54748	Close recovery acceptance and reconcile blocked workplans ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e38e-e5bb-7b50-968d-a738a0294997	2026-09-27 17:54:47 +02:00
custodian-sync	b73f553c18	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-27: - update .custodian-brief.md for user-engine Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e38e-e5bb-7b50-968d-a738a0294997	2026-09-27 17:54:26 +02:00
tegwick	b488e19f06	Allow a signed-in person to save their own profile. ... Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 02:18:51 +02:00
tegwick	14aee356cf	Rename Suspend to Suspend access and Make user to Change role. ... Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 01:46:41 +02:00
tegwick	8f7cf0c69d	Keep the consent checkbox and its sentence on one line. ... Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 01:12:11 +02:00
tegwick	662305391f	Name the tenant page Tenant administration. ... Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 00:51:14 +02:00
tegwick	104405ccbf	Ask Authelia for sign-in state on the public sign-in host. ... Authelia rejects the cluster address. Keep the connection inside the cluster and name login.coulomb.social, which matches the session cookie domain. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 00:26:50 +02:00
tegwick	560cdeed46	Show an existing NetKingdom sign-in before the account site continues it. ... The account site said "Not signed in" while Authelia still had a session, and Sign in reused that identity. Ask Authelia who the session cookie is, show that name, and send a fresh sign-in only when a different identity is requested. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-27 00:21:34 +02:00
tegwick	b987a3de9e	Name the account site NetKingdom Identity. ... Say "Signed in as" the identity, and describe a one-time code as a higher security level of the NetKingdom sign-in rather than another sign-in. The account site keeps its own session. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 23:48:00 +02:00
tegwick	b5c60ab2bd	Index USER-WP-0036 as finished. ... The account situational-awareness tasks are done in the work record index. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:47:10 +02:00
custodian-sync	d65cb22654	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-26: - update .custodian-brief.md for user-engine Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:47:06 +02:00
tegwick	85423e8e09	Show login state, active sign-in, and allowed memberships separately. ... USER-WP-0036 keeps the token tenant off the membership list and leaves workload decisions unchecked until the catalogue reports them. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:46:38 +02:00
tegwick	1c7634c7ce	Record State Hub IDs for USER-WP-0036. ... fix-consistency registered the account situational-awareness plan and its three tasks. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:32:03 +02:00
custodian-sync	bcfa29dfb6	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-26: - update .custodian-brief.md for user-engine Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:31:45 +02:00
tegwick	2c80ba4526	Add USER-WP-0036 for account situational awareness. ... The account page currently presents the token tenant as membership. This plan separates login state, active sign-in, and allowed memberships. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-26 20:31:15 +02:00
tegwick	a7672d96af	Index the finished portal account-switch plan. ... Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f	2026-09-25 01:52:27 +02:00