id: railiance-platform
name: Railiance Platform Credential Broker
resource_types:
  - name: credential-grant
    scope_level: Resource
    planes: [Identity, Secret, Audit]
    metadata:
      description: Non-secret authorization metadata for a bounded credential lease.
actions:
  - name: issue
    capabilities: [Use, Operate, Audit]
    planes: [Identity, Secret, Audit]
    exposure_modes: [Metadata]
    metadata:
      required_context: [actor_type, bound_subject, purpose, delivery_mode, requested_ttl_seconds]
caring_profiles: [caring-0.4.0-rc2]
metadata:
  flex_auth_contract: protected-system-v0
  tenant: tenant:platform