feat(policy): add credential grant authorization package
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 37s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81
This commit is contained in:
tegwick 2026-08-23 13:59:03 +02:00
parent df54c1b8f5
commit acbaa4a7c9
12 changed files with 476 additions and 3 deletions

View file

@ -0,0 +1,19 @@
id: railiance-platform
name: Railiance Platform Credential Broker
resource_types:
- name: credential-grant
scope_level: Resource
planes: [Identity, Secret, Audit]
metadata:
description: Non-secret authorization metadata for a bounded credential lease.
actions:
- name: issue
capabilities: [Use, Operate, Audit]
planes: [Identity, Secret, Audit]
exposure_modes: [Metadata]
metadata:
required_context: [actor_type, bound_subject, purpose, delivery_mode, requested_ttl_seconds]
caring_profiles: [caring-0.4.0-rc2]
metadata:
flex_auth_contract: protected-system-v0
tenant: tenant:platform