Skip to content

SPRINT-1 Report — last1id-edge + auth.last1.id migration

Date: 2026-08-28
Status: COMPLETE — 2026-08-28T18:47Z
Principles: R940_PRODUCT_ISOLATION_PRINCIPLES_v1.md


Completed (Cursor) — final

Step Result
1. Provision tunnel last1id-edge UUID 99e618c3-e36e-4752-95ab-b33d7aee6244
1b. cloudflared on VM 114 Active on auth-last1id
2. DNS cutover Ryan confirmed SPRINT-1 DNS ready
2b. PF checks PF-1…PF-6 ALL PASS (post-cutover)
3. Remove lastvet-edge route auth.last1.id removed; cloudflared restarted
4. BWS LAST1_ID_R940_EDGE_CLOUDFLARED_TUNNEL_CREDENTIALS

PF results (post-cutover)

ID Result
PF-1 /health → 200
PF-2 /login → 200
PF-3 OIDC discovery → 200
PF-4 cloudflared active on auth-last1id
PF-5 last1id-edge connector(s) active
PF-6 Kong upstream header present

lastvet-edge final ingress (LastVet + ops — auth removed)

  - hostname: api-staging.last.vet → 192.168.1.90:3000
  - hostname: api.last.vet         → 192.168.1.90:3001
  - hostname: n8n.last1.enterprises → 192.168.1.94:5678
  - hostname: admin.last1.enterprises → 192.168.1.97:5000

auth.last1.id is not on lastvet-edge. Identity ingress is last1id-edge only.


Gate

SPRINT-1 CLOSED. Awaiting Ryan approval to start SPRINT-2 (RealOutcomes @last1id/sdk auth unification).

END SPRINT-1 report