2.3 KiB
A3-IM09 Account and administration
3 November 2026. Owner explicitly approved "Approve IM08 and A3-IM09". Isolated codex/a3-ui-09 starts at published/remotely verified acceptance receipt f0c8c6d321a70b4d477e99c7b9557246b6361cdf, from implementation e2327c1fa2ceaf785d4058c802bafe0d3428c235. No repeat approval required for this scope.
- Reconcile actual Git state; retain generated graph locally and all prior milestone refs.
- Inspect ProfilePage identity/password/providers, existing 2FA/sessions, ConnectedAccountsPage, BackupCard, admin users/audit/system and processing owners.
- Account presentation: named section navigation/focus targets, mounted forms and retained drafts, direct data-settings entry without new writers. Identity/Career Profile separation and existing local/external/security/provider actions preserved.
- Processing presentation: named filters/results and keyboard jump/return; existing polling/identity/events/permissions retained. Corrected native-label overlap, constrained duration column and a reproduced precommit detail-focus race. Existing admin presentation retained.
- 143 distinct frontend cases/11 suites,69 local backend cases,128 distinct scoped browser states across16 configurations.112 unchanged states reused plus16 refreshed processing scans;18/19-case reruns overlap, not added. Types/full lint plus affected successor lint/build and independent review passed. See ACCOUNT_ADMIN_VALIDATION.md.
- Commit/publish validated checkpoints, verify remote refs, update durable handoff; Gate F before IM10.
No API/schema/dependency/migration/model/provider change planned. No real account deletion, security-credential reset, production operation or provider activation for visual verification. Existing confirmations and backend permission checks remain authoritative; fixture tests do not establish live security acceptance. IM08 granular Ghosted pause and mounted AI entitlement-refresh gaps remain OPEN, not silently addressed by this presentation increment.
Affected callers: /profile, /settings data entry, /admin/processing and existing tests. All existing routes and handlers remain. Rollback reverts the isolated UI increment; no database rollback. Full Phase10, European/local/native/provider, final integrated security/recovery/release gates remain separate.