coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
133 commits 1 branch 0 tags 1.3 MiB
Commit graph

2 commits

Author SHA1 Message Date
tegwick
1e1e077b27 Implement inbound caller authentication (ADR 0004); close T03 and T05 
TokenReview-based caller identity with audience-scoped tokens and exact
resource.system to ServiceAccount bindings, per ops-warden's recommendation.
Deletes the unwired tenant-engine live-roles adapter (T03) and adds
make verify-posture (T05). Source implements A2; running digest is still A0
until promotion, so tenancy.current.A stays 0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-18 15:22:52 +02:00
tegwick
f2b3eeefd8 Review NetKingdom Tenancy Posture v0.1 and declare flex-auth posture
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Publishes tenancy.yaml (I1 A0 E2 P n/a R n/a, enables A3), the review
answering rapp-postgres's three asks, and FLEX-WP-0015 to close the gaps.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 18:09:59 +02:00