tegwick
0d554dcea2
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826
74 lines
3.1 KiB
Markdown
74 lines
3.1 KiB
Markdown
---
|
||
id: USER-WP-0028
|
||
type: workplan
|
||
title: "User account journeys and recovery"
|
||
domain: communication
|
||
repo: user-engine
|
||
status: blocked
|
||
flavor: implementation
|
||
owner: codex
|
||
topic_slug: communication
|
||
created: "2026-09-13"
|
||
updated: "2026-09-27"
|
||
state_hub_workstream_id: "145df9d5-a7e9-5d20-8280-9d3ea069838b"
|
||
---
|
||
|
||
Implements docs/account-journeys.md under USER-WP-0027. A passing local
|
||
suite is not evidence that an external provider flow works live.
|
||
|
||
## Complete self-service feedback and safe retries
|
||
|
||
```task
|
||
id: USER-WP-0028-T01
|
||
status: done
|
||
priority: high
|
||
state_hub_task_id: "baa9938e-271b-5590-bdc0-5c844070144c"
|
||
```
|
||
|
||
U01–U04/U10–U13: preserve safe profile input on validation failure; confirm saves, expose actual login name at password handoff, keep invitation/expired/session recovery reachable. Cover success, denial, provider interruption and retry.
|
||
|
||
## Connect authoritative application access
|
||
|
||
```task
|
||
id: USER-WP-0028-T02
|
||
status: wait
|
||
depends_on: [USER-WP-0026-T03]
|
||
blocking_reason: "Blocked on the provider-owned catalogue/admission and scoped grant/revocation contract from USER-WP-0026-T03."
|
||
priority: high
|
||
state_hub_task_id: "5d1bf977-034d-5448-b4fb-5a8b630af6ba"
|
||
```
|
||
|
||
U09 and T05: integrate a supported catalogue/admission source and scoped grants/revocation. Do not present static links or membership as effective authorization. Continues USER-WP-0026-T03; establish provider contract before deployment.
|
||
|
||
2026-09-27: blocked on the provider-owned catalogue/admission and scoped
|
||
application grant/revocation contract described in USER-WP-0026-T03. Current
|
||
membership CRUD and PDP evaluation cannot supply fleet-wide admission or mutate
|
||
application-owned grants. Resume integration after owners identify the supported
|
||
source, entry-point registry, identity/action mapping and mutation contract.
|
||
|
||
## Complete optional OTP onboarding with provider evidence
|
||
|
||
```task
|
||
id: USER-WP-0028-T03
|
||
status: wait
|
||
depends_on: [KEY-WP-0035, NK-WP-0033]
|
||
blocking_reason: "U05-U08 depend on KEY-WP-0035 and NK-WP-0033 credential custody before live handoff."
|
||
priority: high
|
||
state_hub_task_id: "40e46e52-31ac-5abd-8793-04c1b7b82df3"
|
||
```
|
||
|
||
U05–U08: depends on KEY-WP-0035 and NK-WP-0033 credential custody. Verify enrollment/cancel/replace/lost-factor recovery and old-AAL1-session behavior before enabling live handoff. No stub acceptance.
|
||
|
||
|
||
Validation: 210 database-enabled regression tests passed with no skips,
|
||
including independent-connection last-admin protection and nested bootstrap
|
||
rollback. Thirteen isolated Chromium checks passed. Provider OTP and application
|
||
access integration remain explicitly open; no complete-journey claim is inferred.
|
||
|
||
2026-09-27: credential custody and optional-policy rollout are complete
|
||
(KEY-WP-0035, RPF-WP-0040); NK-WP-0033 is also finished. The earlier missing-
|
||
credential dependency is superseded. P04/P06 installed-provider evidence covers
|
||
enrollment/cancellation, recovery/replacement and old-session enforcement.
|
||
The remaining blocker is attended real-user U05–U08 acceptance and verified
|
||
portal setup handoff, not another service token. See USER-WP-0027-T04 and
|
||
`docs/evidence/2026-09-13-p06-authentication-policy.md`.
|