curo/kite
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(07.4): create phase plan — 2 plans, Wave 0 xfail stubs + Wave 1 fgp implementation

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
curo1305
2026-06-06 20:22:29 +02:00
co-authored by Claude Sonnet 4.6
parent 50668cc916
commit de0f3fb7c3
3 changed files with 546 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.planning/ROADMAP.md
+10 -2
View File
@@ -506,7 +506,15 @@ Before any phase is marked complete, all three gates must pass:
**Depends on**: Phase 7.3
**Requirements**: Tracked in `.planning/codebase/CONCERNS.md` §"No Token Fingerprint / Token Binding"
**Status:** Not planned yet
**Plans**: 2 plans
**Wave 0** — Test scaffolds (no production code)
- [ ] 07.4-01-PLAN.md — Wave 0 xfail stubs: test_auth_fgp.py (4 stubs covering FGP-01..04)
**Wave 1** *(blocked on Wave 0)* — Production implementation + test promotion
- [ ] 07.4-02-PLAN.md — _compute_fgp helper + create_access_token fgp claim + get_current_user fgp validation + login/refresh call site updates + promote all 4 FGP tests
---
@@ -526,4 +534,4 @@ Before any phase is marked complete, all three gates must pass:
| 7.1. Security: session revocation on privilege change (CR-01..03) | 0/2 | Planned | — |
| 7.2. Security: JTI claim + Redis access-token revocation | 3/3 | Complete | 2026-06-05 |
| 7.3. Security: ES256 algorithm upgrade | 3/3 | Complete | 2026-06-06 |
| 7.4. Security: token fingerprinting / token binding | 0/? | Not planned (INSERTED) | — |
| 7.4. Security: token fingerprinting / token binding | 0/2 | Planned | — |