WIP: Claude Code rate-limit checkpoint (20dd5562)
This commit is contained in:
parent
3de72fe6f5
commit
150b1f55fb
8 changed files with 230 additions and 15 deletions
|
|
@ -51,6 +51,23 @@
|
|||
}
|
||||
],
|
||||
"actions": [
|
||||
{
|
||||
"name": "tenant.read",
|
||||
"capabilities": [
|
||||
"View",
|
||||
"Audit"
|
||||
],
|
||||
"planes": [
|
||||
"Identity",
|
||||
"Audit"
|
||||
],
|
||||
"exposure_modes": [
|
||||
"Metadata"
|
||||
],
|
||||
"metadata": {
|
||||
"required_context": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "tenant.create",
|
||||
"capabilities": [
|
||||
|
|
@ -104,6 +121,42 @@
|
|||
"required_context": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "tenant.role.read",
|
||||
"capabilities": [
|
||||
"View",
|
||||
"Audit"
|
||||
],
|
||||
"planes": [
|
||||
"Identity",
|
||||
"Policy",
|
||||
"Audit"
|
||||
],
|
||||
"exposure_modes": [
|
||||
"Metadata"
|
||||
],
|
||||
"metadata": {
|
||||
"required_context": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "tenant.role.read.live",
|
||||
"capabilities": [
|
||||
"View",
|
||||
"Audit"
|
||||
],
|
||||
"planes": [
|
||||
"Identity",
|
||||
"Policy",
|
||||
"Audit"
|
||||
],
|
||||
"exposure_modes": [
|
||||
"Metadata"
|
||||
],
|
||||
"metadata": {
|
||||
"required_context": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "tenant.plan.assign",
|
||||
"capabilities": [
|
||||
|
|
@ -258,6 +311,23 @@
|
|||
"metadata": {
|
||||
"description": "flex-auth's own service identity. Authorized only for tenant.guardrail.read so the PDP can consume ceilings without being able to change them (FLEX-WP-0014)."
|
||||
}
|
||||
},
|
||||
{
|
||||
"id": "user-engine",
|
||||
"type": "Service",
|
||||
"display_name": "user-engine service principal",
|
||||
"organization_relation": "ServiceProvider",
|
||||
"roles": [
|
||||
"Operator"
|
||||
],
|
||||
"groups": [
|
||||
"group:tenant-engine-writers",
|
||||
"group:tenant-engine-readers"
|
||||
],
|
||||
"tenant": "tenant:platform",
|
||||
"metadata": {
|
||||
"description": "user-engine's service identity. It owns the portal workflow that reads and mutates tenant lifecycle records through tenant-engine."
|
||||
}
|
||||
}
|
||||
],
|
||||
"groups": [
|
||||
|
|
@ -265,7 +335,8 @@
|
|||
"id": "group:tenant-engine-writers",
|
||||
"display_name": "tenant-engine Write API Callers",
|
||||
"members": [
|
||||
"tenant-engine"
|
||||
"tenant-engine",
|
||||
"user-engine"
|
||||
],
|
||||
"tenant": "tenant:platform"
|
||||
},
|
||||
|
|
@ -274,7 +345,8 @@
|
|||
"display_name": "tenant-engine Guardrail Readers",
|
||||
"members": [
|
||||
"flex-auth",
|
||||
"tenant-engine"
|
||||
"tenant-engine",
|
||||
"user-engine"
|
||||
],
|
||||
"tenant": "tenant:platform"
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue