From 05bf8bf22129371ec0b3835f0dcbcf1c0d006fe1 Mon Sep 17 00:00:00 2001
From: Jon Chery <jchery@jccapital.xyz>
Date: Wed, 19 Aug 2026 23:00:37 +0000
Subject: [PATCH] =?UTF-8?q?docs(ship):=20P3=20complete=20=E2=86=92=20v1.27?=
 =?UTF-8?q?.3=20(v1.28=20idp-auth)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---ci---
project: acdl
phase: 3
milestone: v1.28
status: complete
---/ci---
---
 .ciagent/CHECKPOINT.json | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.ciagent/CHECKPOINT.json b/.ciagent/CHECKPOINT.json
index fb32cc7..47355ea 100644
--- a/.ciagent/CHECKPOINT.json
+++ b/.ciagent/CHECKPOINT.json
@@ -1,18 +1,19 @@
 {
-  "phase": 2,
+  "phase": 3,
   "stage": "complete",
   "milestone": "v1.28",
   "phase_role": "execution",
   "attempts": 0,
-  "updated_at": "2026-08-19T22:00:00Z",
+  "updated_at": "2026-08-19T22:30:00Z",
   "project": "acdl",
   "projects": ["acdl", "nova-blockchain-exchange"],
   "active_milestone": "v1.28",
   "milestone_branch": "milestone/v1.28-cli-identity",
-  "phase_branch": "phase/02-lambda-packaging",
+  "phase_branch": "phase/03-idp-auth",
   "tag_line": "v1.27.x",
-  "phase_name": "lambda-packaging",
-  "reqs_covered": ["REQ-329", "REQ-330", "REQ-331", "REQ-332"],
-  "tests": {"p2_specific": 43, "total_passing": 922, "failures": 0},
-  "notes": "v1.28 P2 SHIP. lambda-packaging complete. Tag v1.27.2. Merged phase/02 -> milestone/v1.28-cli-identity. 4 REQs covered (REQ-329..332). Dual-use refactor (>=80% share), local env synthesizer, JWS-from-PAT HKDF (C-5.2 grill fix), attestations dir. Next: P3 idp-auth."
+  "phase_name": "idp-auth",
+  "reqs_covered": ["REQ-333", "REQ-334", "REQ-335"],
+  "caps_verified": ["CAP-036"],
+  "tests": {"p3_specific": 22, "total_passing": 944, "failures": 0},
+  "notes": "v1.28 P3 SHIP. idp-auth complete. Tag v1.27.3. Merged phase/03 -> milestone/v1.28-cli-identity. 3 REQs covered (REQ-333..335), CAP-036 verified. nova-idp-auth Lambda (sign-up/sign-in/session), Argon2id t=3 m=65536 p=1 fail-closed, 4 DDB tables. Next: P4 token-vend-pat (highest-risk, double-length)."
 }
\ No newline at end of file