Open
Conversation
Made-with: Cursor
Made-with: Cursor
Made-with: Cursor
Made-with: Cursor
…dit_forced_password_change Made-with: Cursor
…equirement Made-with: Cursor
…lestone archives - Ship planning truth for AUD-04-043 / EX-44-05 (44 inventory, 09 verification, 09-03-SUMMARY) - Add 80-01/80-02 SUMMARY, 80-REVIEW, 80-VERIFICATION; archive v1.17 ROADMAP/REQUIREMENTS - Fix STATE/ROADMAP/PROJECT after phase completion; REQUIREMENTS marked complete Made-with: Cursor
Remove live REQUIREMENTS.md for a clean next milestone; add MILESTONES and RETROSPECTIVE entries; point ROADMAP at archived requirements; sync STATE and PROJECT footers. Made-with: Cursor
… audit atomicity Made-with: Cursor
Implement commit_api_token_jwt_audit/3 mirroring verify-failure audit path: Repo.transaction + Audit.log_multi_safe, telemetry from changes, invalid changeset and constraint_violation handling. Replace log_safe in audit_jwt_*. Refs: AUD-18-01, AUD-18-02 Made-with: Cursor
Made-with: Cursor
Happy path, audit-off, CHECK fault injection with log_safe_error telemetry for api.jwt_refresh and api.jwt_refresh_reuse. Refs: AUD-18-03 Made-with: Cursor
Align AUD-04-048/049 across 44/45 inventories and 09 C-1; CHANGELOG [Unreleased]; 81-VERIFICATION merge gate; 09-03-SUMMARY bounded-batch note. Refs: AUD-18-04 Made-with: Cursor
Made-with: Cursor
Made-with: Cursor
Mark AUD-18 requirements done; archive v1.18 in ROADMAP; fix STATE after phase.complete; add 81-REVIEW quick pass; 81-VERIFICATION status passed. Refs: AUD-18 Made-with: Cursor
Made-with: Cursor
- add oauth_e2e_playwright job for mock-issuer specs - upload playwright bundle and failure diagnostics
- run MFA audit and backup-code rotation preflight tests - normalize GAUAT-07 bundle to a transcript-first pending scaffold - mark Task 2 human witness artifacts as the remaining blocker
- record passing getting-started contract as the mechanical floor - reset evidence files to honest pending-human-witness placeholders
- Generated timestamped browser-flow transcript for the regenerate flow - Captured explicit proof that a pre-rotation backup code fails after regeneration - Captured mfa.backup_codes_regenerate audit proof - Captured compact machine summary of the visible regenerate flow states
…acts - Run MIX_ENV=test mix sigra.uat.report --phase=mfa-backup-rotation - Kept transcript/query evidence primary in the README language
- Verified README points at machine-owned transcript, invalidation proof, audit proof, and UI summary - Confirmed no artifact overstates what the UI alone proves
…acts - Emit transcript, env, and reports via scripts/ci/install-smoke.sh - Capture fresh-host prerequisites and lifecycle timestamps
- Emit manifest.json from getting-started run - Update README.md with generated-host lifecycle context
- Verified README points to machine-owned transcript, env capture, and lifecycle report - Confirmed no human-usability claims are over-claimed
- Modifies `hero_snapshot_relpath` to use `Path.wildcard` so it can find the existing snapshot on disk even if the current git sha has moved forward since the evidence was generated.
- Adds v1.20-GA-UAT-RESULTS.md with Phase 86/87/88 evidence links and status. - Maintains SEED-001 as deferred because Phase 87 provenance is not yet resolved. - Explicitly flags GAUAT-03..06 as BLOCKED per the 87-VERIFICATION truth.
- Asserts the Phase 87 provenance block correctly. - Captures the hybrid manual/automated verification for GAUAT-07 and GAUAT-08. - Sets launch-leg disposition to NO-GO (BLOCKED BY PROVENANCE) because of the pending Phase 87 URLs.
e02f864 to
f26212c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose: run the current Phase 87/88 automated CI lanes from the committed local graph now pushed as ci/phase-88-provenance.\n\nHead SHA: d5034b1.\nLocal uncommitted workspace changes are not part of this PR.\n\nExpected jobs:\n- Install smoke (fresh phx.new + sigra.install)\n- OAuth E2E Playwright (mock issuer)\n- MFA backup-code rotation E2E