amadan
Record enabled Home exchange preview and remaining account linking
1 file changed,
+5
−0
implementation/overnight-2026-09-07.md+5 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index fb4965a..a819bf5 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -714,3 +714,8 @@ Full review is retained there and posted to suite discussion 5. |
| - Deployment revealed CARLOS rejects quoted JSON environment values. Follow-up eaefda9 adds explicit canonical BASE64 configuration alternatives with bounded decoding, ambiguous-input refusal and unchanged semantic checks. Full local/actual CI green; Fable follow-up running under oficina-home-encoded-review-20260908.service. Do not deploy/enable before review result. |
| - Supported CARLOS instances set-environment exists in platform origin/maindcf0cad; isolated CLI built at /tmp/oficina-carlos-sso/carlos. Existing preview hosts currently share overnight-home environment. Plan: credential keeps overnight-home; directory rebinds to overnight-directory preserving its host/DB/socket. Existing HOME_DEK copied privately to that new unused bundle to preserve any existing sealed state; credential pepper/signin/DEK unchanged. New private assertion key is in overnight-home only. Failed directory env set was rejected before mutation because JSON quotes were invalid. Directory has not been rebound. Never put assertion private key in default app config. |
| - Remaining: configure/verify two-role preview, live handoff/error/replay/restart checks and restore evidence; authoritative roster/team chooser; Docs identity linking that preserves existing PersonIDs/grants; two-team isolation; reviewed cutover of common app hosts with legacy deep-link continuity. No first-visitor ownership grants, remote DB editing or production channel promotion. |
| + |
| +- DEPLOYED and ENABLED eaefda935d5214855f2154152f701c7fa0b5309a on the paired Home previews. Directory binding converged to overnight-directory, credential remains overnight-home; original socket/data paths and existing keys preserved. Directory explicitly overrides inherited pepper, signin key and mail settings empty. Public-key/consumer manifests use the approved BASE64 form. Exact live body/header and artifact SHA receipt: /tmp/oficina-home-assertion-release/verified.json. |
| +- Fable5 APPROVE for encoded config delta and separate actual canary evidence review. Full actual CI success checked. Home branch merged normally through Amadan as0dc863c. Shared Home checkout remains the owner's domain/oficina-works branch; fetched remote but did not switch or overwrite it. |
| +- Eight live Chromium/WebKit JS/width cases passed Home→credential navigation with real secure browser-bound cookies and exact deployment versions. Eight live HTTPS consumer tests passed foreign-origin, expired, wrong-nonce and replay refusal, eight parallel callbacks with one winner, synthetic identity session creation, signout CSRF and revocation. These do not assert live email authentication; actual-handler local browser flow and email/recovery integration cover that path separately. User notified with https://overnight-home.bds.oncarlos.com/ and the placeholder signed-in destination. Team chooser and Docs return remain unimplemented. |
| +- Asked user asynchronously for the first real team's name and URL label; no answer yet. This is needed for the real alias/bootstrap, not authorization to continue implementation. Docs analysis confirms existing people.id owns content while verified email drives legacy sessions/grants; explicit fresh double-auth linking must retain that ID. Rastrillo auth exposes SessionFrom/RequireFreshSession, but Home's assertion endpoint still needs an explicit max-age reauthentication continuation before safe roster editing/account linking. Do not mint fresh auth_time from a standing session. Original full team-entry acceptance remains outstanding. |