From cc959171ba1e36f45aae7e5d8fe41c6140f2030d Mon Sep 17 00:00:00 2001 From: curo1305 Date: Sat, 6 Jun 2026 17:10:37 +0200 Subject: [PATCH] docs(phase-07.3): update tracking after wave 1 Co-Authored-By: Claude Sonnet 4.6 --- .planning/ROADMAP.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md index 7f653b9..2d30895 100644 --- a/.planning/ROADMAP.md +++ b/.planning/ROADMAP.md @@ -489,7 +489,7 @@ Before any phase is marked complete, all three gates must pass: **Wave 1** *(blocked on Wave 0)* — ES256 core + startup rotation -- [ ] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2 +- [x] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2 **Wave 2** *(blocked on Wave 1)* — "Remember me" 16h/30d TTL split @@ -525,5 +525,5 @@ Before any phase is marked complete, all three gates must pass: | 7. Redo and optimize LLM integration | 5/5 | Complete | 2026-06-05 | | 7.1. Security: session revocation on privilege change (CR-01..03) | 0/2 | Planned | — | | 7.2. Security: JTI claim + Redis access-token revocation | 3/3 | Complete | 2026-06-05 | -| 7.3. Security: ES256 algorithm upgrade | 1/3 | In Progress| | +| 7.3. Security: ES256 algorithm upgrade | 2/3 | In Progress| | | 7.4. Security: token fingerprinting / token binding | 0/? | Not planned (INSERTED) | — |