flex-auth/cmd/flex-auth
tegwick 1e1e077b27 Implement inbound caller authentication (ADR 0004); close T03 and T05
TokenReview-based caller identity with audience-scoped tokens and exact
resource.system to ServiceAccount bindings, per ops-warden's recommendation.
Deletes the unwired tenant-engine live-roles adapter (T03) and adds
make verify-posture (T05). Source implements A2; running digest is still A0
until promotion, so tenancy.current.A stays 0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-18 15:22:52 +02:00
..
main.go Implement inbound caller authentication (ADR 0004); close T03 and T05 2026-08-18 15:22:52 +02:00
main_test.go Implement inbound caller authentication (ADR 0004); close T03 and T05 2026-08-18 15:22:52 +02:00