Repository navigation
id: implement delayed ID-key rebind protocol (from #2046/#2852 slice 2) #3809
Description
Child implementation packet of #2852, gated by the settled synthesis in #2046. Implement #2258 spec §4 as an independently mergeable slice.
Scope: old-key approval path; delayed recovery request; notification and cancellation; prevent fresh binding while rebind is pending; publish a signed rebind record; persist auditable history. Use the rebind waiting period accepted in #2046—do not choose a duration locally.
Gate: depends on #2852 slice 1 / its account and binding record contract. If the waiting period or CSE handling is not accepted in #2046, park instead of guessing.
Acceptance: deterministic tests cover both recovery paths, cancellation, expiry, attempted bypass, and signed publication; each implementation PR references this issue and #2852.
Activity
developing-today commentedon Nov 1, 2026
CODE-1546
dezren39 commentedon Nov 1, 2026
🤖 Agent note · handed off
dezren39 commentedon Nov 2, 2026
agent-note:v1
event: picked_up
task: 5815 (repo-health-code-pilot, OpenChamber scheduled lane)
state: Fresh checks: #3809 OPEN; #2046 is OPEN and records a 30-day rebind wait as a recommendation while explicitly asking Drew to accept or override. No acceptance is recorded in the issue history. Parent tracker #2852 remains OPEN with status/waiting-dependency and requires #2046 to accept §8 parameters. #2258 spec is CLOSED. The packet says not to choose a duration and to park if unanswered.
next: park without creating a worktree or changing code; resume only after Drew accepts/overrides the rebind interval and the #2852 gate is cleared.
31 remaining items
id: hosted account + ID binding ceremony (spec §§1,3) (#3808)
dezren39 commentedon Nov 3, 2026
🤖 Agent note · parked (dependency cleared — implementation not started, timebox)
c29174f1-48e0-4b13-b4ff-9b73ab67e9abrepo-health-code-pilot) — implement id: design: hosted provisioning + SSO→ID binding spec — account/binding records, challenge ceremony, delayed rebind, metering, export (from #2045) #2258 §4 delayed ID-key rebind.ce2f197b6), landingpkgs/id/src/hosted_binding.rs(1512 lines, 15 tests) onmain— account registry, binding record, attestation, and therebind_pending/supersededstates reserved for this slice.origin; no other agent owns this task.main, add the §4 surface toHostedBindingService— request (bound to the 30-day wait), notice toemail_contact, old-key cancel, expiry sweep, rejection of any fresh/recovery ceremony whileRebindPending(CeremonyError::RebindPendingalready exists), signed rebind record publication per §4.4 (fillHistoryEntry::rebind_record_id,via = "delayed-rebind"), and append-only history; add deterministic tests usingset_now_overrideto fast-forward the 30 days.dezren39 commentedon Nov 3, 2026
🤖 Agent note · picked up
pkgs/id/src/hosted_binding.rs(id: implement delayed ID-key rebind protocol (from #2046/#2852 slice 2) #3809, slice 2 of id: implement hosted provisioning + SSO→ID binding (from spec #2258) #2852): fast path (old-key authorization), delayed path (30-day wait per the id: design: ID serverless edition v1 (Cloudflare Workers) #2046 ruling, CSE default ON already landed in slice 1), notification + old-key cancel/approve-early, pending-state bypass prevention, signed §4.4 rebind publication, auditable history — with deterministic tests for both paths, cancel, expiry, bypass, and signed publication.Merge pull request #4885 from developing-today/queue/5815-3809-delaye…
dezren39 commentedon Nov 3, 2026
🤖 Agent note · done (task 5815)
e5152ad662b315096228a6cabc82e1dbc5b39fed) —pkgs/id/src/hosted_binding.rsnow implements §4 end to end: fast path (old-key authorization over{binding_id, new_iroh_id, challenge_id}, immediate), delayed path (new-key challenge proof, 30-day wait per the id: design: ID serverless edition v1 (Cloudflare Workers) #2046 ruling, bindingrebind_pendingand account reserved — fresh ceremonies keep failing as §3.4 conflicts), §4.3 notice artefact + old-key cancel (final; a later request restarts the full wait) and approve-early conversion, and §4.4 signed publication (history appended, service-signed + new-key-countersignedRebindRecord, verifiable offline viaverify_rebind_record). Requests and records are retained as the auditable history.cargo test --lib hosted_bindingon the laptop: 21 passed — 6 new deterministic tests cover both recovery paths, cancellation, expiry (not-yet-effective + expired challenge), bypass attempts (fresh ceremony + second request while pending), and signed publication.