LAST1.ID W7-5 GCP OAuth Delete Report¶
Date: 2026-08-26
Status: COMPLETE
Ryan deleted legacy OAuth client 645620802422-4ce80057aa1s3vvpb5edkf63ckpnauql via GCP Console. Agent recorded deletion and re-verified sovereign Google OAuth.
Verification — PASS¶
| Check | Result |
|---|---|
| Legacy client deleted (Ryan GCP Console) | Confirmed |
| Deletion record written | backups/last1id-railway-teardown-2026-08-26/gcp-oauth-deletion-record.json |
| Sovereign Google authorize URL | Uses 889079898378-p9dffvhr7tqdh1e71j2rlq45epnuq844 (dedicated client) |
Legacy client 645620802422-… in sovereign path |
Absent |
| Sovereign JWKS | HTTP 200, kid last1-rs256-staging-v1 |
| Hosted Supabase (legacy consumer) | Deleted W7-3 |
Note: Classic OAuth client deletion is not verifiable via public API without authenticated GCP credentials on this host. Consumer of the legacy client (hosted Supabase GoTrue) is gone; sovereign path confirmed live.
Deleted resource¶
| Field | Value |
|---|---|
| GCP project | last1app (645620802422) |
| Client name | Last1.id |
| Client ID | 645620802422-4ce80057aa1s3vvpb5edkf63ckpnauql.apps.googleusercontent.com |
| Replacement | 889079898378-p9dffvhr7tqdh1e71j2rlq45epnuq844.apps.googleusercontent.com (Last1.id GCP project) |
Record script¶
W7-5 verdict¶
COMPLETE. Proceed to W7-6 (BWS cleanup + soak cron removal).