- Shipped
- November 15, 2026 at 9:33 AM UTC
- Author
- Kamo
- Commit
- e3b4373
- **************** (adaptive_step_up_enabled BOOLEAN NOT NULL DEFAULT false; defaultsFor = OFF) - identity.UserSignInDevice (user_signin_devices, UNIQUE user+device hash; first_seen DB-stamped, last_seen DB-stamped on every save) - identity.SignInRiskEvent (signin_risk_events, index org+time) + STRING enums SignInRiskMethod, SignInRiskAction - identity.PatientPortalIdentity (patient_portal_identities) — identity package, not clinical.portal: the contract shape is not a ClinicalBaseEntity and ClinicalEntityDisciplineTest holds every clinical entity to that - repos in identity.repos (already scanned by SecurityService): UserSignInDeviceRepository, SignInRiskEventRepository (org + time range, by member / user list, paged; no unindexed by-user finder), PatientPortalIdentityRepository - AccessLogEventType += SIGNIN_UNUSUAL, ACCOUNT_SECURED, PASSKEY_POLICY_GRACE, PASSWORD_BREACH_NUDGED, LOGIN_PORTAL_FEDERATED; NotificationKind += SIGNIN_NEW_DEVICE (both appended last) - IdentityRiskFoundationTest; AccessLogEventTypeTest / IdentityProviderFoundationTest anchors updated Tables hand-applied as kamo before this push.