WIP: Claude Code rate-limit checkpoint (20dd5562)

This commit is contained in:
Claude Code 2026-08-18 15:25:17 +02:00
parent 3de72fe6f5
commit 150b1f55fb
8 changed files with 230 additions and 15 deletions

View file

@ -51,6 +51,23 @@
}
],
"actions": [
{
"name": "tenant.read",
"capabilities": [
"View",
"Audit"
],
"planes": [
"Identity",
"Audit"
],
"exposure_modes": [
"Metadata"
],
"metadata": {
"required_context": []
}
},
{
"name": "tenant.create",
"capabilities": [
@ -104,6 +121,42 @@
"required_context": []
}
},
{
"name": "tenant.role.read",
"capabilities": [
"View",
"Audit"
],
"planes": [
"Identity",
"Policy",
"Audit"
],
"exposure_modes": [
"Metadata"
],
"metadata": {
"required_context": []
}
},
{
"name": "tenant.role.read.live",
"capabilities": [
"View",
"Audit"
],
"planes": [
"Identity",
"Policy",
"Audit"
],
"exposure_modes": [
"Metadata"
],
"metadata": {
"required_context": []
}
},
{
"name": "tenant.plan.assign",
"capabilities": [
@ -258,6 +311,23 @@
"metadata": {
"description": "flex-auth's own service identity. Authorized only for tenant.guardrail.read so the PDP can consume ceilings without being able to change them (FLEX-WP-0014)."
}
},
{
"id": "user-engine",
"type": "Service",
"display_name": "user-engine service principal",
"organization_relation": "ServiceProvider",
"roles": [
"Operator"
],
"groups": [
"group:tenant-engine-writers",
"group:tenant-engine-readers"
],
"tenant": "tenant:platform",
"metadata": {
"description": "user-engine's service identity. It owns the portal workflow that reads and mutates tenant lifecycle records through tenant-engine."
}
}
],
"groups": [
@ -265,7 +335,8 @@
"id": "group:tenant-engine-writers",
"display_name": "tenant-engine Write API Callers",
"members": [
"tenant-engine"
"tenant-engine",
"user-engine"
],
"tenant": "tenant:platform"
},
@ -274,7 +345,8 @@
"display_name": "tenant-engine Guardrail Readers",
"members": [
"flex-auth",
"tenant-engine"
"tenant-engine",
"user-engine"
],
"tenant": "tenant:platform"
}