flex-auth

Author	SHA1	Message	Date
tegwick	249ee146ba	Enforce caller-auth on flex-auth-ops-warden (FLEX-WP-0016-T03) All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 2s Details ops-warden WARDEN-WP-0031 T04 minted audience-flex-auth tokens as system:serviceaccount:ops-warden:ops-warden and held the warn-log count. Helm rev 2 is enforce. Live probe 200/401/403. policy.enabled is theirs.	2026-08-19 20:10:31 +02:00
tegwick	259f8a20a6	Add isolated ops-warden warn pin (FLEX-WP-0016); FLEX-WP-0007 stays finished All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details policy.enabled cannot flip against the user-engine or tenant-engine bindings. Helm release flex-auth-ops-warden rev 1 serves the production registry in warn. Workstation warden sends no caller token; enforce and the yaml flip stay ops-warden's.	2026-08-19 14:50:04 +02:00