coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 7s
Details

Browse source 
Point residual and ops-sso-access design at the file-backed work records
in net-kingdom rather than informal coordination notes.
This commit is contained in:
tegwick 2026-07-22 10:47:25 +02:00
parent 91353df7d0
commit 652e799969
2 changed files with 21 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/ops-sso-access.md
View file

@ -48,8 +48,15 @@ Response headers trusted into the app:
### Access control policy
Authelia global `default_policy: one_factor` currently applies. MVP accepts any
authenticated Authelia user. Follow-up (T06): LLDAP group
`activity-core-operators` + Authelia domain rules (net-kingdom config change).
authenticated Authelia user. Follow-up (T06) is filed as work-record intakes
in **net-kingdom** (not hub-only notes):
| Intake | Scope |
| --- | --- |
| `NK-IN-0001` | LLDAP group `activity-core-operators` + membership runbook |
| `NK-IN-0002` | Authelia domain rules for `activity` + `temporal` hosts |
See `net-kingdom/docs/intakes/activity-core-ops-sso-operators.md`.
## Mutation identity