The caller side of USER-WP-0023 is deployed, but FLEX-WP-0015-T02 is still wait: flex-auth's TokenReview choke point exists in source while the running digest is unchanged, so production accepts unauthenticated callers and our Authorization header is ignored. Running the T03 probe now would record a false pass on the negative case. Captures both owed live exercises as concrete commands so they can be run by whoever holds cluster credentials the moment flex-auth promotes A2, and notes that they share one rollout. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .claude/rules | ||
| .forgejo/workflows | ||
| docs | ||
| migrations/postgres | ||
| openapi | ||
| registry | ||
| src/user_engine | ||
| tests | ||
| wiki | ||
| workplans | ||
| .custodian-brief.md | ||
| .gitignore | ||
| .repo-classification.yaml | ||
| AGENTS.md | ||
| CLAUDE.md | ||
| Containerfile | ||
| INTENT.md | ||
| LICENSE | ||
| Makefile | ||
| pyproject.toml | ||
| README.md | ||
| SCOPE.md | ||
| WORK-RECORDS.md | ||
Headless multi-application, multi-tenant user management engine.
Development
make test
See docs/development.md, docs/configuration.md, docs/contracts.md,
docs/canon-mapping.md, docs/canon-interface-card.yaml,
docs/evidence-gap-examples.md, docs/family-dataspace-onboarding.md,
docs/netkingdom-registration-onboarding-vision.md,
docs/postgres-durable-store-consumer-requirements.md, docs/examples.md,
docs/registration-identity-and-factor-model.md,
docs/prepared-accounts-and-entitlement-claims.md,
docs/hats-realms-services-assets-access-profiles.md,
docs/onboarding-journeys-and-welcome-protocols.md,
docs/registration-and-access-management-ui.md, docs/scenarios.md,
docs/registration-scenario-and-security-conformance.md,
docs/operability.md, docs/release.md, docs/ui-contracts.md,
docs/identity-domain-naming-decision.md, and docs/final-assessment.md
for implementation boundaries, contracts, canon mappings, examples, and release
readiness.