docs(phase-07.3): update tracking after wave 1
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 4.6
parent
c606191f17
commit
cc959171ba
@@ -489,7 +489,7 @@ Before any phase is marked complete, all three gates must pass:
|
|||||||
|
|
||||||
**Wave 1** *(blocked on Wave 0)* — ES256 core + startup rotation
|
**Wave 1** *(blocked on Wave 0)* — ES256 core + startup rotation
|
||||||
|
|
||||||
- [ ] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2
|
- [x] 07.3-02-PLAN.md — config.py jwt_private_key/jwt_public_key/refresh_token_expire_hours + services/auth.py 4 sites to ES256 + main.py _rotate_tokens_on_algorithm_change lifespan hook + docker-compose JWT_PRIVATE_KEY/JWT_PUBLIC_KEY + README key-gen snippet + .env.example + version bump 0.1.2
|
||||||
|
|
||||||
**Wave 2** *(blocked on Wave 1)* — "Remember me" 16h/30d TTL split
|
**Wave 2** *(blocked on Wave 1)* — "Remember me" 16h/30d TTL split
|
||||||
|
|
||||||
@@ -525,5 +525,5 @@ Before any phase is marked complete, all three gates must pass:
|
|||||||
| 7. Redo and optimize LLM integration | 5/5 | Complete | 2026-06-05 |
|
| 7. Redo and optimize LLM integration | 5/5 | Complete | 2026-06-05 |
|
||||||
| 7.1. Security: session revocation on privilege change (CR-01..03) | 0/2 | Planned | — |
|
| 7.1. Security: session revocation on privilege change (CR-01..03) | 0/2 | Planned | — |
|
||||||
| 7.2. Security: JTI claim + Redis access-token revocation | 3/3 | Complete | 2026-06-05 |
|
| 7.2. Security: JTI claim + Redis access-token revocation | 3/3 | Complete | 2026-06-05 |
|
||||||
| 7.3. Security: ES256 algorithm upgrade | 1/3 | In Progress| |
|
| 7.3. Security: ES256 algorithm upgrade | 2/3 | In Progress| |
|
||||||
| 7.4. Security: token fingerprinting / token binding | 0/? | Not planned (INSERTED) | — |
|
| 7.4. Security: token fingerprinting / token binding | 0/? | Not planned (INSERTED) | — |
|
||||||
|
|||||||
Reference in New Issue
Block a user