Phase 5 - #4

Merged

chris-adam merged 145 commits into

Aug 6, 2026

Commits on Jul 31, 2026

docs(04): research PAS boundary phase
chris-adam
committed
6883bfb
docs(04): add validation strategy

chris-adam
and
claude
committed
5b4d19c
docs(04): create phase 4 plans

chris-adam
and
claude
committed
8102f97
docs(04): track the phase 4 pattern map

chris-adam
and
claude
committed
fb41f24
docs(04): record phase 4 planned in STATE.md

chris-adam
and
claude
committed
84c285b
feat(04-01): move 2FA redirect from authenticateCredentials to IPubBeforeCommit

chris-adam
and
claude
committed
a9838e2
test(04-01): assert the empty body over a real HTTP round trip

chris-adam
and
claude
committed
b5468aa
docs(04-01): complete pas-boundary redirect relocation plan

chris-adam
and
claude
committed
db8cc18
feat(04-02): assert PAS plugin ordering with movePluginsTop, re-asserted on reinstall
chris-adam
committed
b3f5e18
docs(04-02): record decision to keep credentials_basic_auth active
chris-adam
committed
3b2c6d7
docs(04-02): complete PAS plugin ordering plan
chris-adam
committed
09a0dc6
feat(04-03): add IChallengePlugin.challenge for the Unauthorized path
chris-adam
committed
2ab4998
test(04-03): one veto assertion per credentials extractor, plus exception path
chris-adam
committed
5161203
docs(04-03): complete PAS boundary unauthorized-challenge plan
chris-adam
committed
6e8b557
docs(04-04): document Zope-root boundary and Basic Auth consequence (DOC-01, DOC-02)
chris-adam
committed
fd1e854
docs(04-04): changelog phase 4 -- PAS boundary rework as shipped
chris-adam
committed
6bd4264
docs(04-04): complete DOC-01/DOC-02 README + changelog plan
chris-adam
committed
cdf580f
docs(04): add code review report

chris-adam
and
claude
committed
cb0c0e0
test(04): add verification report and persist human verification item as UAT

chris-adam
and
claude
committed
9718410
test(04): complete UAT - 1 passed, 0 issues

chris-adam
and
claude
committed
7afb267
docs(phase-04): add security threat verification

chris-adam
and
claude
committed
03798aa
docs(phase-04): complete phase and advance to phase 5

chris-adam
and
claude
committed
3eb1caa
docs(phase-04): update validation strategy after execution audit

chris-adam
and
claude
committed
b8cd170
docs(phase-05): research drift, replay and lockout domain
chris-adam
committed
f01d214
docs(phase-05): add validation strategy and record lockout scope decision
chris-adam
committed
1b20955
docs(05): create phase plan

chris-adam
and
claude
committed
7546aeb
docs(05): commit the pattern map the plans reference

chris-adam
and
claude
committed
0a6f4bb
docs(05): record phase planned, annotate roadmap wave dependencies
chris-adam
committed
06e6fb3
feat(05-01): declare lockout counters and wire the lock gate into token.py
chris-adam
committed
bb528fe
test(05-01): prove the memberdata/registry declarations actually took effect
chris-adam
committed
4993047
test(05-01): prove the lock is not an oracle, expires, resets, and survives Unauthorized
chris-adam
committed
bd8a195
docs(05-01): complete lockout substrate and gate plan
chris-adam
committed
52ee7a6
feat(05-02): accept one step of clock drift, refuse a replayed TOTP code

chris-adam
and
claude
committed
69ea86d
test(05-02): prove the TOTP replay rejection is logged without a username

chris-adam
and
claude
committed
43fdd53
docs(05-02): complete drift and replay plan

chris-adam
and
claude
committed
fc4a7b3
feat(05-03): meter @@reset-bar-code with the shared lockout counter
chris-adam
committed
b4139b1
test(05-03): prove the reset path is metered and the lock has no bypass
chris-adam
committed
bd8e44f
docs(05-03): record phase 5 in CHANGES.rst, including the profile-import requirement
chris-adam
committed
e7ed383
docs(05-03): fill the MFA-05/06/07 rows plan 05-02 left as TBD
chris-adam
committed
a691c4a
docs(05-03): complete reset-bar-code lockout plan
chris-adam
committed
ed88c45
docs(05): add code review report

chris-adam
and
claude
committed
972ae68
docs(phase-05): add verification report, revert premature Complete requirements

chris-adam
and
claude
committed
27a65b1

Commits on Aug 1, 2026

docs(05-04): plan the CR-01 lockout-oracle gap closure
chris-adam
committed
d94d2ac
fix(05-04): move lockout gate behind signature check in token.py
chris-adam
committed
ff28800
test(05-04): prove locked/unlocked/unknown accounts are indistinguishable to an unsigned caller
chris-adam
committed
eee1d29
docs(05-04): complete CR-01 lockout-oracle gap closure plan
chris-adam
committed
6a3a8ef
docs(05): re-review code after 05-04 gap closure
chris-adam
committed
b1a2ecf
docs(phase-05): re-verify after 05-04; revert premature MFA-08 Complete
chris-adam
committed
bcba7b1
docs(05): plan 05-05 gap closure for the reset-bar-code lock-state oracle

chris-adam
and
claude
committed
f580db2
docs(05-05): apply plan-checker fixes

chris-adam
and
claude
committed
1f373e7
test(05-05): add failing test for reset-bar-code lock-state oracle
chris-adam
committed
21d5572
feat(05-05): close the reset-bar-code lock-state oracle (MFA-08)
chris-adam
committed
be31592
docs(05-05): record MFA-08 not-an-oracle reset-path row in 05-VALIDATION.md
chris-adam
committed
deaf3d0
docs(05-05): complete reset-bar-code lock-state oracle gap closure plan
chris-adam
committed
cef6904
docs(05): re-review code after 05-05 gap closure

chris-adam
and
claude
committed
de07713
test(05): persist human verification items as UAT

chris-adam
and
claude
committed
626bcda

Commits on Aug 3, 2026

docs(05): declare no external API integration in COVERAGE.md

chris-adam
and
claude
committed
b0baad8
fix: keep the bar-code reset request on its own form instead of the site root

chris-adam
and
claude
committed
a14b012
test(05): record two field findings from server.dmsmail testing

chris-adam
and
claude
committed
ccf9f95
fix(05): keep lockout counters off the user-profile schema

chris-adam
and
claude
committed
6634113
test(05): record the profile-form crash as gap G-05-A, correct the F-1 finding

chris-adam
and
claude
committed
dc1b2d4
fix: pin both JS registrations below jQuery in jsregistry.xml

chris-adam
and
claude
committed
452b66c
test(05): UAT test 1 passes; close out the F-1 JavaScript finding

chris-adam
and
claude
committed
dccc34a
test(05): UAT test 2 passes; JS ordering fix confirmed on the deployment

chris-adam
and
claude
committed
a123bd7
test(05): UAT test 3 passes, replay-on-reuse recorded as intended

chris-adam
and
claude
committed
9f8ea3b
test(05): UAT test 4 passes -- token endpoint leaks no lock state through the proxy

chris-adam
and
claude
committed
97d217f
test(05): revert UAT test 4 to pending -- both proxy comparisons ran against 404s

chris-adam
and
claude
committed
6d5c370
test(05): record the real cause of the tests 4 and 5 404s

chris-adam
and
claude
committed
aea4854
test(05): reject the GET-based attempt at tests 4 and 5 -- wrong HTTP method

chris-adam
and
claude
committed
e23ffff
test(05): complete UAT -- 6 passed, 0 issues

chris-adam
and
claude
committed
0ab2707
docs(phase-05): add security threat verification

chris-adam
and
claude
committed
446b83b
docs(05): verification status human_needed -> passed

chris-adam
and
claude
committed
d716ac1
docs(phase-05): complete phase, transition to phase 6

chris-adam
and
claude
committed
1800741
docs(05): correct stale "Gaps Found" traceability rows for MFA-05 to MFA-13

chris-adam
and
claude
committed
8efa3ab
docs(phase-05): evolve PROJECT.md after phase completion

chris-adam
and
claude
committed
a605aa1
docs(06): research recovery-codes phase domain
chris-adam
committed
993afb9
docs(phase-6): add validation strategy

chris-adam
and
claude
committed
f8fb5ab
docs(06): create phase plan

chris-adam
and
claude
committed
73f4074
docs(06): record phase 6 planned, add pattern map

chris-adam
and
claude
committed
9314b28
feat(06-01): recovery code login end-to-end (tracer)
chris-adam
committed
429a873
test(06-01): pin the recovery-code storage contract
chris-adam
committed
f6d74e5
docs(06-01): complete recovery-code substrate plan
chris-adam
committed
e0e0724
feat(06-02): issue recovery codes at enrollment, render once in same response
chris-adam
committed
dc9deb5
feat(06-02): add regeneration portal action, no new view
chris-adam
committed
6c035ac
test(06-02): prove issue-once, never-again, and regeneration invalidates all
chris-adam
committed
fdfde6c
docs(06-02): complete recovery-code enrollment display and regeneration plan

chris-adam
and
claude
committed
1f8d7a4

Commits on Aug 4, 2026

feat(06-03): warn on three or fewer recovery codes remaining
chris-adam
committed
6f5c6c0
test(06-03): assert the shared lockout counter, the low-count warning, and the single dispatch point
chris-adam
committed
623fa04
test(06-03): extend the MFA-12 guard to this phase's new writers
chris-adam
committed
00091e7
docs(06-03): complete lockout-sharing and low-count warning plan

chris-adam
and
claude
committed
26c14ab
docs(06): add code review report

chris-adam
and
claude
committed
a6b06ec
test(06): persist human verification items as UAT

chris-adam
and
claude
committed
c1e59d1
test(06): complete UAT - 1 passed, 0 issues

chris-adam
and
claude
committed
ce6ce0e
docs(phase-06): add security threat verification

chris-adam
and
claude
committed
cddd826
docs(phase-06): complete phase execution

chris-adam
and
claude
committed
c218a89
docs(07): research phase domain
chris-adam
committed
bf8819b
docs(phase-7): add validation strategy

chris-adam
and
claude
committed
5c4958a
docs(07): add pattern map

chris-adam
and
claude
committed
886ad1f
docs(07): create phase plan — 4 plans, tracer-first, waves 1-4

chris-adam
and
claude
committed
aed3b9a
docs(07): add artifacts and removals sections to 07-04

chris-adam
and
claude
committed
56afb71
docs(07): record planning completion for phase 7

chris-adam
and
claude
committed
04cc9df
feat(07-01): restore stock login overlay by deleting vendored popupforms.js
chris-adam
committed
df39c1d
feat(07-01): delete vendored login_form.cpt and close both ends of the next_url pipe
chris-adam
committed
6c14064
docs(07-01): complete restore-stock-login-overlay plan
chris-adam
committed
26d413a
feat(07-02): convert live templates to descriptors and delete skin mechanism
chris-adam
committed
925ea17
test(07-02): pin skin-layer deletion with test_skin_layer_is_removed
chris-adam
committed
726d24d
docs(07-02): complete convert-live-templates-and-delete-skin-mechanism plan
chris-adam
committed
23b4594
feat(07-03): ship a scoped uninstall profile for main.js and main.css
chris-adam
committed
31cb9a9
docs(07-03): correct the two overridden-asset claims and add the Phase 7 entry
chris-adam
committed
0ca0566
docs(07-03): complete uninstall-profile-and-coexistence-proof plan
chris-adam
committed
548edca

Commits on Aug 5, 2026

fix(quick-260805-f5m): stop the user-created subscriber breaking site creation

chris-adam
and
claude
committed
184f053
docs(quick-260805-f5m): record COEX-10, the quick task, and two open findings

chris-adam
and
claude
committed
bd1323a
docs(07-04): record both manual verifications and the enrolment gap

chris-adam
and
claude
committed
3fd0d51
docs(phase-07): complete phase execution

chris-adam
and
claude
committed
a83313d
docs(08): capture phase context

chris-adam
and
claude
committed
3b7e3e2
docs(state): record phase 8 context session

chris-adam
and
claude
committed
2a0820b
docs(08): research coverage instrumentation and test-layer migration
chris-adam
committed
311b4b8
docs(phase-8): add validation strategy

chris-adam
and
claude
committed
7aea6d9
docs(08): create phase plans

chris-adam
and
claude
committed
cf6094d
docs(08): record planning state, wave annotations, and pattern map

chris-adam
and
claude
committed
5466586
feat(08-01): repair coverage instrument end to end
chris-adam
committed
352a612
docs(08-01): complete coverage instrument repair plan
chris-adam
committed
cab1c1d
chore(08-01): gitignore htmlcov/ coverage-html build output
chris-adam
committed
9caf656
feat(08-02): give the test layer its own install hook, drop ZSERVER from functional layer
chris-adam
committed
c1b17e6
feat(08-02): delete the quickinstaller install path, rewrite installedness assertion
chris-adam
committed
d64788d
docs(08-02): complete test-layer install mechanism plan
chris-adam
committed
f999920
docs(08-02): correct SUMMARY requirements-completed for QUAL-05's two-plan split
chris-adam
committed
deea135
feat(08-03): move every test class to the functional layer, retire the integration layer
chris-adam
committed
4c6be92
docs(08-03): complete test-layer migration plan
chris-adam
committed
b20be96
feat(08-04): test the per-user 2FA-disable view's three branches
chris-adam
committed
df830be
feat(08-04): test the bulk disable view and two untested save-handler branches
chris-adam
committed
6f84f1e
feat(08-04): close the branch-coverage gap above 90% and gate CI on it
chris-adam
committed
6fdafab
docs(08-04): complete branch-coverage-gap-closure plan
chris-adam
committed
2ecf9f5
style(08-05): mechanical import sweep with bin/isort -rc -y src/
chris-adam
committed
c1ff26c
style(08-05): hand-fix remaining lint findings, clear the gate (QUAL-06)
chris-adam
committed
a3f6643
docs(08-05): correct CLAUDE.md and TESTING.md to match the cleared gate (D-19)
chris-adam
committed
a9f0374
docs(08-05): add plan summary
chris-adam
committed
76e5fb2
docs(08-05): append self-check results to summary
chris-adam
committed
d955a39
docs(08-05): complete lint-gate-cleanup-and-documentation-correction plan
chris-adam
committed
d49cb00
docs(08): add code review report
chris-adam
committed
d46604e
test(08): add verification report and persist human verification item as UAT
chris-adam
committed
da44189