boban 27ebc570f4 docs(spec): WebAuthn/YubiKey 2nd-factor design (Phase 2) ... Optional security-key 2nd factor via web-auth/webauthn-lib, gated on domain + HTTPS (rpId = active domain). TOTP + backup codes stay the required 2FA and the only recovery. Build now with unit/feature tests (mocked ceremony) + R12 gating; real YubiKey end-to-end deferred to a domain+HTTPS host. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 18:12:32 +02:00
..
superpowers	docs(spec): WebAuthn/YubiKey 2nd-factor design (Phase 2)	2026-06-14 18:12:32 +02:00
install-update-design.md	feat: v1 dashboard UI — app shell + component kit + mock fleet	2026-06-12 01:10:23 +02:00
session-handoff.md	chore(release): v0.5.0	2026-06-14 17:14:47 +02:00
v1-ui-review.md	fix: apply v1 UI review (a11y, contrast, live-chart robustness)	2026-06-12 06:16:52 +02:00