sec(auth): let a directory account hold an engine second factor, and mint Kerberos at the minimum (BACKLOG #1144) - #842

Open

wshallwshall wants to merge 5 commits into

mainfrom

worktree-agent-aaf8481e1400f92e7

Commits on Sep 3, 2026

sec(auth): a directory account may hold an engine second factor (BACKLOG #1144)

wshallwshall
and
claude
committed
f12be2b
docs(backlog): record what #1144 landed and what its ceiling still turns on

wshallwshall
and
claude
committed
a7e3552

Commits on Sep 4, 2026

fix(auth): the directory login outcome must report the debt it created (BACKLOG #1144)

wshallwshall
and
claude
committed
caee5b6
docs(auth): finish the delegation sweep the #1144 build started

wshallwshall
and
claude
committed
53e1189
docs: retire the AD-MFA-delegation claim in the five documents that still made it

wshallwshall
and
claude
committed
9a0d27e