tegwick
62d6f8b0c7
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
1.8 KiB
| id | type | title | domain | repo | status | owner | topic_slug | created | updated | state_hub_workstream_id |
|---|---|---|---|---|---|---|---|---|---|---|
| USER-WP-0030 | workplan | Platform administration and operational recovery | communication | user-engine | active | codex | communication | 2026-09-13 | 2026-09-13 | ab18c962-4ac4-5cf4-a8d9-edb773afbe8c |
Implements docs/account-journeys.md under USER-WP-0027. A passing local suite is not evidence that an external provider flow works live.
Expose scoped audit and delivery recovery
id: USER-WP-0030-T01
status: done
priority: high
state_hub_task_id: "f51e3796-b649-586b-a228-c23f94804500"
P01/P03/P05/P08/T08: authorized browser views of safe audit metadata and delivery state, reference filtering, CSRF replay with readback, no raw payload/credential/error dumps.
Make tenant lifecycle and bootstrap recoverable
id: USER-WP-0030-T02
status: done
priority: high
state_hub_task_id: "09c2d30a-8230-5da2-b2d4-7a161259f557"
P02/P04/P07: preserve first-admin setup on retry without duplication, explicit tenant lifecycle confirmation, stale-version recovery and validation; verify cross-role isolation.
Integrate provider policy and credential operations
id: USER-WP-0030-T03
status: wait
priority: high
state_hub_task_id: "07510026-caee-54d7-998c-a8d2b2f17773"
P04–P06: owner-approved factor credential delivery/renewal and provider recovery/policy control. Depends on KEY-WP-0035/NK-WP-0033; no secret vending through portal or chat.
Validation: 210 database-enabled regression tests passed with no skips, including independent-connection last-admin protection and nested bootstrap rollback. Thirteen isolated Chromium checks passed. Provider OTP and application access integration remain explicitly open; no complete-journey claim is inferred.