Commit Graph

1007 Commits

Author SHA1 Message Date
ae113d2cff test(19.4): complete UAT - 3 passed, 0 issues 2026-10-20 00:23:50 +02:00
e9c98b0564 docs(19.5): research and validation strategy 2026-10-19 22:39:08 +02:00
a04fe6bf32 docs(19.4): coverage matrix passes the api-coverage lint 2026-10-19 22:17:12 +02:00
4d32d96395 test(19.4): persist human verification items as UAT 2026-10-19 22:14:39 +02:00
c86bcbf3be docs(19.4): phase verification report 2026-10-19 22:14:34 +02:00
9066feb609 docs(19.4): record code review disposition 2026-10-19 22:05:27 +02:00
1453631f60 docs(19.4): add code review report 2026-10-19 22:05:21 +02:00
0cb5be3bbe docs(19.4-04): record plan state and roadmap progress 2026-10-19 21:51:49 +02:00
0f74b3b343 docs(19.4-04): complete unit tests, PHP method map and phase gate plan 2026-10-19 21:51:05 +02:00
31cca1a491 docs(19.4): validation map filled, Nyquist compliant
Every task of plans 01-04 with its command and status; Wave 0 done; the
parity row stays deferred to the WavePath cutover (D-14 amended).
2026-10-19 21:45:29 +02:00
6d7193c9a5 docs(19.4-03): record plan state and roadmap progress 2026-10-19 20:41:49 +02:00
2ace6a2b9d docs(19.4-03): complete cutover, operations, parity harness and security review plan 2026-10-19 20:40:57 +02:00
7f56382106 docs(19.4): security review
ASVS L1 walk over the wristband OIDC flavour, sm-oauthserver-plugin and the
sm-user-plugin additions. T-19.4-01..34 and T-19.4-SC verified or fixed (test
pins in summercms.go eaa545c and sm-oauthserver-plugin b4223be, f8eaf70);
new findings T-19.4-36..39 accepted with reasons; nothing left unresolved.
2026-10-19 20:38:36 +02:00
3386cbef83 docs(19.4): defer PHP OIDC parity recording to the WavePath cutover
The user skipped the parity recording at 19.4-03 Task 5 and decided the
phase passes without it. D-14 in this phase is the fail-closed harness;
recording WavePath and a green replay move to the WavePath cutover phase
(todo 2026-10-19-record-php-oidc-parity-against-wavepath).
2026-10-19 20:26:05 +02:00
8a1d413b7d docs: capture todo - Record PHP OIDC parity against WavePath before the OIDC cutover 2026-10-19 20:25:27 +02:00
1e37926ee9 docs(19.4-02): record plan state and roadmap progress 2026-10-19 19:28:09 +02:00
8171eb25ef docs(19.4-02): complete sm-oauthserver-plugin plan 2026-10-19 19:27:30 +02:00
1c0d22a216 docs(19.4-01): record plan state and self-check 2026-10-19 18:36:18 +02:00
49e772afb8 docs(19.4-01): complete OIDC provider on wristband plan 2026-10-19 18:35:37 +02:00
811124259c docs(19.4): close neutral wristband resource todo 2026-10-19 18:32:10 +02:00
756a97c181 docs(19.4): decide OIDC on wristband with golang-jwt
- Extend the hand-written wristband with an OIDC flavour; reject zitadel/oidc v3 (D-06, D-09, D-14)
- golang-jwt/jwt/v5 v5.3.1 signs id_tokens; JWKs encoded with the standard library
- go-oidc v3.21.0 and x/oauth2 v0.37.0 test-only in sm-oauthserver-plugin
- STACK.md zitadel/oidc row marked superseded
2026-10-19 18:06:54 +02:00
95051d26ce docs(state): sync state.json after phase 19.4 planning 2026-10-19 18:00:09 +02:00
cf8d48c092 docs(19.4): create phase plan 2026-10-19 17:59:57 +02:00
df0d8c1d55 docs(phase-19.4): add research and validation strategy 2026-10-19 17:06:42 +02:00
10992ea1a5 docs(quick-261019-hgw): Translate hook ValidationError phrase keys in the request locale 2026-10-19 12:54:34 +02:00
d785958df2 docs(state): Phase 17 UAT and re-verification complete 2026-10-19 12:33:06 +02:00
1fca32042b docs(17): re-verify phase 17 — passed, release gap closed 2026-10-19 12:32:43 +02:00
c5b6a83299 test(17): complete UAT - 40 passed, 0 issues 2026-10-19 12:24:39 +02:00
0827865796 docs(todo): sitemap browser view without XSLT 2026-10-19 12:23:06 +02:00
96595633c0 docs(quick-261019-05g): Phase 17 verify-work unblock and console docs example 2026-10-19 00:16:46 +02:00
59f57819cc docs(17): shorten the COVERAGE.md opt-out reason and state the goal as a user story 2026-10-19 00:13:45 +02:00
eb7e39d335 docs(g15office): map Phase 20 demo, 30 cutover and 31 chat polish tasks 2026-10-18 23:16:37 +02:00
4fb9f142df docs(roadmap): reorder — demo at 20, Płytarium cutover 20→30, chat polish 19.2→31
New Phase 20 is a public demo instance on sm-demo-app with every shared
plugin. Phases 21-29 stay off the roadmap until their goals firm up.
The cutover (closing v1.0) moves to 30; WavePath work starts at 31 with
the former 19.2, Horoskopia follows at 36-40. Seeds, notes and the
30-CONTEXT now point at the new numbers.
2026-10-18 23:16:08 +02:00
Jakub Zych
6aaaf59f43 docs(phase-19.1): complete phase transition 2026-10-18 19:26:07 +02:00
Jakub Zych
f1ff2f940b docs(19.1): re-verify after review fixes; mark WR-04 and WR-05 fixed 2026-10-18 19:25:32 +02:00
Jakub Zych
62c948f5e6 docs(quick-261018-qbs): fix 19.1 review WR-04 and WR-05, optional-dependency doc note
Registers T-19.1-13..17 in 19.1-SECURITY.md.
2026-10-18 19:19:20 +02:00
Jakub Zych
3b0f2c32b8 docs(state): log goldens secret-gate fast task 2026-10-18 18:05:47 +02:00
Jakub Zych
8553cd2afe docs(phase-19.1): close T-19.1-12 after goldens secret gate 2026-10-18 18:05:29 +02:00
Jakub Zych
2785bebd32 docs(phase-19.1): add security threat verification 2026-10-18 18:04:41 +02:00
Jakub Zych
b3f0b6ded0 test(19.1): complete UAT - 1 passed, 0 issues
Records the accepted userfriends go.mod override in VERIFICATION.md.
2026-10-18 17:54:54 +02:00
Jakub Zych
ebedba8c94 docs(19.1): persist verification, UAT and review disposition 2026-10-18 16:11:13 +02:00
Jakub Zych
905b035184 docs(19.1): add code review report 2026-10-18 16:10:02 +02:00
Jakub Zych
32617944a9 docs(19.1-06): record plan progress after maps and goldens SUMMARY
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 16:02:15 +02:00
Jakub Zych
7e51959b14 docs(19.1-06): complete PHP maps, goldens and phase gate plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 16:01:40 +02:00
Jakub Zych
374088eccf docs(19.1-02): complete forum tracer plan 2026-10-18 15:43:18 +02:00
Jakub Zych
1f204f5a6c docs(quick-261018-k9s): add the D-17 module in summercms.go 2026-10-18 14:55:11 +02:00
Jakub Zych
5ccf726e8a docs(19.1-05): record plan progress after chatvideo SUMMARY
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 14:02:49 +02:00
Jakub Zych
782a6720bf docs(19.1-05): complete chatvideo tracer plan
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 14:02:02 +02:00
Jakub Zych
43c4040256 docs(19.1-05): record livekit/server-sdk-go/v2 v2.19.0 before import
Pin github.com/livekit/server-sdk-go/v2 v2.19.0 (Apache-2.0). Flag
pion/media-sdk/buildkit; production talks to RoomAPI only; tests ship a
fake and must not construct lksdk.Room. Operator HTTP uses fetchguard
TrustedMode. Token golden vs PHP LiveKitService.php 80-99; jwt/v5
MapClaims fallback if ToJWT differs.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 13:52:27 +02:00
Jakub Zych
4f58c8fc2a docs(19.1-04): record plan progress after herald SUMMARY
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-18 13:50:31 +02:00