docs(phase-07.3): update tracking after wave 1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
curo1305
2026-06-06 17:10:37 +02:00
co-authored by Claude Sonnet 4.6
parent c606191f17
commit cc959171ba
+2 -2
View File
@@ -489,7 +489,7 @@ Before any phase is marked complete, all three gates must pass:
**Wave 1** *(blocked on Wave 0)* — ES256 core + startup rotation
- [ ] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2
- [x] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2
**Wave 2** *(blocked on Wave 1)* — "Remember me" 16h/30d TTL split
@@ -525,5 +525,5 @@ Before any phase is marked complete, all three gates must pass:
| 7. Redo and optimize LLM integration | 5/5 | Complete | 2026-06-05 |
| 7.1. Security: session revocation on privilege change (CR-01..03) | 0/2 | Planned | — |
| 7.2. Security: JTI claim + Redis access-token revocation | 3/3 | Complete | 2026-06-05 |
| 7.3. Security: ES256 algorithm upgrade | 1/3 | In Progress| |
| 7.3. Security: ES256 algorithm upgrade | 2/3 | In Progress| |
| 7.4. Security: token fingerprinting / token binding | 0/? | Not planned (INSERTED) | — |