flex-auth

Author	SHA1	Message	Date
tegwick	ca070df32d	Record authenticated caller in the decision envelope. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Successful in 1m0s Details FLEX-WP-0023-T04: provenance.caller is additive (mode required; principal/audience/not_after when a token was reviewed). TokenReview keeps the JWT exp. request_digest is unchanged because the caller is not binding material. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 04:44:07 +02:00
tegwick	41f359f2dc	Resolve OpenRouter native contract and promote secrets-engine PDP All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 3s Details Build and Publish Container Image / build-and-push (push) Successful in 1m8s Details Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-14 00:54:56 +02:00