user-engine/workplans/USER-WP-0032-platform-service-operations.md
tegwick 38b041385e
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Account journey acceptance / journeys (push) Successful in 6s
Record verified P05 rollout and service recovery acceptance
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
2026-09-13 22:31:16 +02:00

2.9 KiB

id type title domain repo status owner topic_slug created updated state_hub_workstream_id
USER-WP-0032 workplan P05 checked service health and bounded delivery recovery communication user-engine finished codex communication 2026-09-13 2026-09-13 35af93fc-17ed-548e-8da7-616e44e8eee0

Complete P05 under USER-WP-0030-T03. P06 remains separate. Do not send production messages for acceptance; use the existing loopback SMTP/IMAP harness. Live SMTP authentication diagnostics do not submit a message or claim inbox delivery.

Expose checked service state with clear recovery steps

id: USER-WP-0032-T01
status: done
priority: high
state_hub_task_id: "0c9ebc81-ea7c-597e-a908-2806e5a8c57f"

Operator-only, bounded checks for KeyCape dependencies/current factor-read credential and mail database/SMTP authentication. Show checked time, impact, unknown versus unavailable state, retry and assisted setup; no secrets or raw provider errors. Health probes must not send mail.

Make selected delivery and retry safe and reviewable

id: USER-WP-0032-T02
status: done
priority: high
state_hub_task_id: "6be221b9-5378-54a9-ae12-37a52cc9e186"

Fix failed worker claims; serialize event operations across connections; confirm one selected delivery and reject stale/repeated completion. Missing email lane must not mark invitations accepted. Preserve provider idempotency across lost responses and restart; uncertain SMTP outcomes must not auto-resend. No automatic processing of the production backlog during this task.

Verify failure and recovery through native and harness acceptance

id: USER-WP-0032-T03
status: done
priority: high
state_hub_task_id: "5ee8bb39-e725-592e-baf2-04063c579ccd"

Installed-provider genuine JWT expiry, scope withdrawal/recovery and outage; native renewal/projection; SMTP/IMAP received-message and retry tests with a local mailbox; role/CSRF/stale/ambiguous-outcome browser coverage. Publish digest pinned releases and verify live non-sending status. Close RPF-WP-0040 acceptance using its specified isolated fixture rather than disrupting live authentication.

Completed 2026-09-13. Evidence: docs/evidence/2026-09-13-p05-service-operations.md. 227 portal tests with disposable PostgreSQL, 23 browser checks, 89 email tests, real local SMTP/IMAP one-message retry reconciliation, installed-provider expiry / permission recovery and native credential rotation passed. Three exact-commit CI image releases are deployed and all six live component checks pass without sending production mail. The invitation URL and historical Never-pull drift are corrected in live and canonical configuration.

Residuals already have live owners before closure: P06 is USER-WP-0030-T03 / KEY-WP-0035; actual user inbox/acceptance journeys remain USER-WP-0028, and the historical resolver incident remains NK-WP-0033. P05 does not claim these done.