2026-11-14 10:17:13 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Test: merge status page, notice, wording and undo by fresh proof (red; page, component and wording are skeletons)
2026-11-14 10:11:12 +00:00
Account merge ledger: pin the Stripe refusal for a folded account whose survivor is suspended
2026-11-14 06:32:44 +00:00
Account merge ledger: fix the first Soul pass (suspension carried into a memberless survivor, merged status terminal, standing at the desk door, linked accounts and write time, journalled grace intake, survivor weight on moved votes, one-hop alias, State token and database guards for overlapping merges, live-Postgres tests)
2026-11-14 03:37:48 +00:00
Account merge saga: plan digest ignores the id of a membership not yet created, pin grace boundary, unique move ids and the confirm write gate, ProofSeal prints no bearer, commit the mutant probe
2026-11-14 09:26:27 +00:00
Test: a sign-in through a moved login lands on the survivor's account (saga rig opens to page tests)
2026-11-14 10:07:46 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Suspension gaps: bootstrap, demotion, members-page notices, admin-only reason ( #60 )
2026-11-11 14:12:47 +00:00
tests: dispatch-gate tests run on Linux; classify the remaining Yggdrasil failures ( #75 )
2026-11-12 12:24:51 +00:00
ConceptAppraisalServiceTests: a recast through a fresh context persists the changed stance
2026-10-10 09:56:52 +02:00
Linux path fixes: containment by path.relative, hostile-cursor test, verify prerequisites ( #77 )
2026-11-12 12:55:35 +00:00
Registry tests: pin the order of already-retired entries
2026-10-10 23:26:43 +02:00
Tally export Vary: plain append, no dedupe
2026-10-10 22:19:52 +02:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
Prefix lengths: host-level startup tests (tests only) ( #62 )
2026-11-11 14:12:55 +00:00
Consent: optional at registration, a consent page, CSRF-guarded accept/withdraw, notice v2 ( #58 )
2026-11-11 12:11:02 +00:00
Chat sign-in needs a live consent receipt; notice frozen as version 1 ( #59 )
2026-11-11 14:32:06 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Desk: pin vectors to CultLib de8a062a ( #45 )
2026-11-11 02:16:28 +00:00
Desk: the fork desk's Bifrost half ( #40 )
2026-11-11 01:02:36 +00:00
Desk: the fork desk's Bifrost half ( #40 )
2026-11-11 01:02:36 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: the fork desk's Bifrost half ( #40 )
2026-11-11 01:02:36 +00:00
Desk: the fork desk's Bifrost half ( #40 )
2026-11-11 01:02:36 +00:00
Desk: the fork desk's Bifrost half ( #40 )
2026-11-11 01:02:36 +00:00
Desk: bearer credential (OpenIddict validation, desk.read/desk.answer, audience bifrost-desk) and answerer masking ( #71 )
2026-11-12 10:17:29 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Move client: a 400 is RequestInvalid only with Heimdall's invalid_request body
2026-11-14 04:14:38 +00:00
Vote budgets: at the cap a new key evicts the least recently used key with permits left
2026-10-11 19:16:30 +02:00
AppSecretFile: pin the deprecation at Warning level, say trailing newlines
2026-11-12 13:46:24 +00:00
Linked accounts page: list, link any admitted provider, unlink with step-up proof
2026-11-13 19:35:40 +00:00
Account merge ledger: one write gate for every writer, held across the standing read and the save
2026-11-14 06:08:36 +00:00
Test: first undefined attempt purpose is now 11 (9 and 10 are the merge proofs)
2026-11-14 10:04:45 +00:00
Move client: pin duplicate identityIds and over-length proofs as refused before any request
2026-11-14 07:49:52 +00:00
Test: a 307 from Heimdall is not followed by the auth and member clients (red)
2026-11-14 09:56:19 +00:00
Initial Scaffold
2026-04-21 20:08:49 +01:00
Soul fixes: deploy doc says production refuses a blank secret; name the echo test for what it checks
2026-11-12 19:27:57 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Purge audit: Detail carries window and count, never the network tag the member dashboard would render
2026-10-10 09:56:08 +02:00
Suspension gaps: bootstrap, demotion, members-page notices, admin-only reason ( #60 )
2026-11-11 14:12:47 +00:00
Members: approve refuses no-membership/unknown accounts; neutral text for legacy suspensions ( #65 )
2026-11-11 16:39:48 +00:00
Test: merge-proof sign-ins complete into MergeProofs (red; completion cases are stubs)
2026-11-14 09:59:46 +00:00
MergeProofs: in-memory per-actor holder of merge proofs
2026-11-14 09:57:45 +00:00
Test: merge status page, notice, wording and undo by fresh proof (red; page, component and wording are skeletons)
2026-11-14 10:11:12 +00:00
MergeStatus page: the member's merges and undo by fresh proof of every moved login
2026-11-14 10:17:13 +00:00
Test: merge status page, notice, wording and undo by fresh proof (red; page, component and wording are skeletons)
2026-11-14 10:11:12 +00:00
Account merge saga: consumer tests through the real host and the fake mover, live-Postgres races, docs
2026-11-14 06:48:43 +00:00
Mind intake: nonce prune is best-effort and never fails a valid request; test the five-lost-races contended branch; doc the retried reveal's phase judgement
2026-11-09 20:55:03 +00:00
Concept vote tests: close the mutation survivors in view, purge window, slug and prefix masking
2026-10-10 08:42:55 +02:00
Linked accounts page: list, link any admitted provider, unlink with step-up proof
2026-11-13 19:35:40 +00:00
Account merge ledger: AccountMerge receipt, reductions, alias standing, undo and final sweep
2026-11-14 02:31:51 +00:00
OIDC back-channel logout: a reconciler ends the sessions of subjects who are not Active
2026-10-28 00:38:15 +01:00
Suspension gaps: bootstrap, demotion, members-page notices, admin-only reason ( #60 )
2026-11-11 14:12:47 +00:00
Account merge ledger: AccountMerge receipt, reductions, alias standing, undo and final sweep
2026-11-14 02:31:51 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Passkeys: WebAuthn enrolment under a fresh sign-in, 48 h cooling-off, assertion proof at unlink ( #85 )
2026-11-14 00:37:56 +00:00
Add Heimdall patron support intake
2026-06-09 17:16:27 +01:00
Registration gates: proof-of-work CAPTCHA and training-notice consent receipt ( #54 )
2026-11-11 10:15:46 +00:00
Delete Epiphany operator bridge
2026-08-22 06:16:39 +02:00
Chat sign-in needs a live consent receipt; notice frozen as version 1 ( #59 )
2026-11-11 14:32:06 +00:00
Chat sign-in needs a live consent receipt; notice frozen as version 1 ( #59 )
2026-11-11 14:32:06 +00:00
Registration gates: proof-of-work CAPTCHA and training-notice consent receipt ( #54 )
2026-11-11 10:15:46 +00:00
Registration gates: proof-of-work CAPTCHA and training-notice consent receipt ( #54 )
2026-11-11 10:15:46 +00:00
Sealed ballot: freeze the reveal set at close (RevealSeq token), HTTP tests for replay/non-voter/late reveal/close, doc corrected on the ballot schema
2026-11-09 20:40:54 +00:00
Sealed ballot: race-safe close, close sweep, endpoint tests, backup reader and auth findings in the doc
2026-11-09 20:30:35 +00:00
Account merge ledger: roll-forward-only Down guard, standing-at-write through one owner for every writer, one current Patron snapshot per membership, memberless Heimdall sign-in, intake and Stripe routing through one owner
2026-11-14 04:58:26 +00:00
Test: snapshot has no drift from the design-time model (passes at base 425af74)
2026-11-14 02:20:25 +00:00
Test: a second simultaneous close of a Standard motion must not throw
2026-11-09 22:13:59 +00:00
Members: approve refuses no-membership/unknown accounts; neutral text for legacy suspensions ( #65 )
2026-11-11 16:39:48 +00:00
Chat sign-in needs a live consent receipt; notice frozen as version 1 ( #59 )
2026-11-11 14:32:06 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
Desk: UnixSocketDeskDoor (Huginn desk door client), fixtures at 79d954c, card re-pin to CultLib 3a51bbab, card opaque ( #70 )
2026-11-12 11:44:45 +00:00
5ddfca9b55