Headless multi-application, multi-tenant user mangement engine.
Find a file
tegwick 7f1db7189c
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 49s
Account journey acceptance / journeys (push) Successful in 47s
USER-WP-0039: accept Authelia session ids with RFC 6265 cookie characters
Real Authelia session ids contain '%', '^' and '!'. The narrower check
dropped them, so the Authelia uid always read 'not signed in / unknown'.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1041694@bnt-lap001
Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52
2026-10-15 04:49:13 +02:00
.claude/rules Hygiene: SCOPE stance sentence, stack/architecture stubs, first-session archive 2026-08-29 14:37:38 +02:00
.forgejo/workflows Install runtime and test dependencies in exact-source journey CI 2026-10-11 02:16:02 +02:00
docs USER-WP-0026-T03: record signed-in readback (correct deny for tegwick) 2026-10-11 23:13:51 +02:00
history Declare Engine/PIP and open USER-WP-0024 for layer conformance 2026-08-29 11:56:06 +02:00
intakes chore(consistency): sync hub ids and work records [auto] 2026-09-27 21:37:31 +02:00
migrations/postgres feat: add durable store conformance harness 2026-06-16 00:20:29 +02:00
openapi Report tenant grouping from the authority record 2026-08-18 10:56:54 +02:00
registry docs(reuse): establish reviewed NetKingdom security capabilities 2026-10-14 06:46:43 +02:00
scripts Isolate tenant readback cache and prepare verified runtime release 2026-10-11 01:58:45 +02:00
src/user_engine USER-WP-0039: accept Authelia session ids with RFC 6265 cookie characters 2026-10-15 04:49:13 +02:00
tests USER-WP-0039: accept Authelia session ids with RFC 6265 cookie characters 2026-10-15 04:49:13 +02:00
tools Prepare exact informed-decision catalogue maintenance decision packet 2026-10-11 03:59:53 +02:00
wiki USER-WP-0034: repoint blueprint source path to access-engine; finished 2026-09-30 18:54:56 +02:00
workplans USER-WP-0039: record State Hub ids from fix-consistency 2026-10-14 23:43:07 +02:00
.custodian-brief.md USER-WP-0039: record State Hub ids from fix-consistency 2026-10-14 23:43:07 +02:00
.gitignore Ignore .repo-manager local index 2026-08-29 11:59:20 +02:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:43 +02:00
AGENTS.md docs(agents): repoint remote State Hub URL to the in-cluster address 2026-08-25 00:22:18 +02:00
CLAUDE.md Hygiene: SCOPE stance sentence, stack/architecture stubs, first-session archive 2026-08-29 14:37:38 +02:00
Containerfile Isolate tenant readback cache and prepare verified runtime release 2026-10-11 01:58:45 +02:00
INTENT.md Apply GH-DEC-2026-020: de-version the standard path and widen the checker. 2026-09-21 09:36:59 +02:00
layer.yaml USER-WP-0026-T03: access-engine application access readback client 2026-10-10 00:45:03 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 01:12:41 +02:00
Makefile Implement role-based account journeys with database and browser acceptance suites 2026-09-13 12:20:02 +02:00
pep-stance.yaml Implement USER-WP-0024 security layer conformance 2026-08-29 12:53:16 +02:00
pyproject.toml Implement authenticated custody observations and durable root-grant baseline 2026-10-03 19:50:15 +02:00
README.md test: add registration security conformance 2026-06-15 23:59:45 +02:00
SCOPE.md Hygiene: SCOPE stance sentence, stack/architecture stubs, first-session archive 2026-08-29 14:37:38 +02:00
uv.lock Implement authenticated custody observations and durable root-grant baseline 2026-10-03 19:50:15 +02:00
WORK-RECORDS.md USER-WP-0038: record State Hub ids from fix-consistency 2026-10-14 09:31:17 +02:00

Headless multi-application, multi-tenant user management engine.

Development

make test

See docs/development.md, docs/configuration.md, docs/contracts.md, docs/canon-mapping.md, docs/canon-interface-card.yaml, docs/evidence-gap-examples.md, docs/family-dataspace-onboarding.md, docs/netkingdom-registration-onboarding-vision.md, docs/postgres-durable-store-consumer-requirements.md, docs/examples.md, docs/registration-identity-and-factor-model.md, docs/prepared-accounts-and-entitlement-claims.md, docs/hats-realms-services-assets-access-profiles.md, docs/onboarding-journeys-and-welcome-protocols.md, docs/registration-and-access-management-ui.md, docs/scenarios.md, docs/registration-scenario-and-security-conformance.md, docs/operability.md, docs/release.md, docs/ui-contracts.md, docs/identity-domain-naming-decision.md, and docs/final-assessment.md for implementation boundaries, contracts, canon mappings, examples, and release readiness.