feat(policy): add credential grant authorization package
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81
This commit is contained in:
parent
df54c1b8f5
commit
acbaa4a7c9
12 changed files with 476 additions and 3 deletions
19
examples/railiance-platform/protected_system_manifest.yaml
Normal file
19
examples/railiance-platform/protected_system_manifest.yaml
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
id: railiance-platform
|
||||
name: Railiance Platform Credential Broker
|
||||
resource_types:
|
||||
- name: credential-grant
|
||||
scope_level: Resource
|
||||
planes: [Identity, Secret, Audit]
|
||||
metadata:
|
||||
description: Non-secret authorization metadata for a bounded credential lease.
|
||||
actions:
|
||||
- name: issue
|
||||
capabilities: [Use, Operate, Audit]
|
||||
planes: [Identity, Secret, Audit]
|
||||
exposure_modes: [Metadata]
|
||||
metadata:
|
||||
required_context: [actor_type, bound_subject, purpose, delivery_mode, requested_ttl_seconds]
|
||||
caring_profiles: [caring-0.4.0-rc2]
|
||||
metadata:
|
||||
flex_auth_contract: protected-system-v0
|
||||
tenant: tenant:platform
|
||||
Loading…
Add table
Add a link
Reference in a new issue