user-engine/workplans/USER-WP-0028-user-journey-acceptance.md
tegwick 62d6f8b0c7
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Record and pin verified account journey release
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
2026-09-13 12:29:43 +02:00

1.9 KiB
Raw Blame History

id type title domain repo status owner topic_slug created updated state_hub_workstream_id
USER-WP-0028 workplan User account journeys and recovery communication user-engine active codex communication 2026-09-13 2026-09-13 145df9d5-a7e9-5d20-8280-9d3ea069838b

Implements docs/account-journeys.md under USER-WP-0027. A passing local suite is not evidence that an external provider flow works live.

Complete self-service feedback and safe retries

id: USER-WP-0028-T01
status: done
priority: high
state_hub_task_id: "baa9938e-271b-5590-bdc0-5c844070144c"

U01U04/U10U13: preserve safe profile input on validation failure; confirm saves, expose actual login name at password handoff, keep invitation/expired/session recovery reachable. Cover success, denial, provider interruption and retry.

Connect authoritative application access

id: USER-WP-0028-T02
status: todo
priority: high
state_hub_task_id: "5d1bf977-034d-5448-b4fb-5a8b630af6ba"

U09 and T05: integrate a supported catalogue/admission source and scoped grants/revocation. Do not present static links or membership as effective authorization. Continues USER-WP-0026-T03; establish provider contract before deployment.

Complete optional OTP onboarding with provider evidence

id: USER-WP-0028-T03
status: wait
priority: high
state_hub_task_id: "40e46e52-31ac-5abd-8793-04c1b7b82df3"

U05U08: depends on KEY-WP-0035 and NK-WP-0033 credential custody. Verify enrollment/cancel/replace/lost-factor recovery and old-AAL1-session behavior before enabling live handoff. No stub acceptance.

Validation: 210 database-enabled regression tests passed with no skips, including independent-connection last-admin protection and nested bootstrap rollback. Thirteen isolated Chromium checks passed. Provider OTP and application access integration remain explicitly open; no complete-journey claim is inferred.