tegwick
1127f852dd
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
1.7 KiB
| id | type | title | domain | repo | status | owner | topic_slug | created | updated |
|---|---|---|---|---|---|---|---|---|---|
| USER-WP-0028 | workplan | User account journeys and recovery | communication | user-engine | active | codex | communication | 2026-09-13 | 2026-09-13 |
Implements docs/account-journeys.md under USER-WP-0027. A passing local suite is not evidence that an external provider flow works live.
Complete self-service feedback and safe retries
id: USER-WP-0028-T01
status: done
priority: high
U01–U04/U10–U13: preserve safe profile input on validation failure; confirm saves, expose actual login name at password handoff, keep invitation/expired/session recovery reachable. Cover success, denial, provider interruption and retry.
Connect authoritative application access
id: USER-WP-0028-T02
status: todo
priority: high
U09 and T05: integrate a supported catalogue/admission source and scoped grants/revocation. Do not present static links or membership as effective authorization. Continues USER-WP-0026-T03; establish provider contract before deployment.
Complete optional OTP onboarding with provider evidence
id: USER-WP-0028-T03
status: wait
priority: high
U05–U08: depends on KEY-WP-0035 and NK-WP-0033 credential custody. Verify enrollment/cancel/replace/lost-factor recovery and old-AAL1-session behavior before enabling live handoff. No stub acceptance.
Validation: 210 database-enabled regression tests passed with no skips, including independent-connection last-admin protection and nested bootstrap rollback. Thirteen isolated Chromium checks passed. Provider OTP and application access integration remain explicitly open; no complete-journey claim is inferred.