tegwick 1e1e077b27 Implement inbound caller authentication (ADR 0004); close T03 and T05 ... TokenReview-based caller identity with audience-scoped tokens and exact resource.system to ServiceAccount bindings, per ops-warden's recommendation. Deletes the unwired tenant-engine live-roles adapter (T03) and adds make verify-posture (T05). Source implements A2; running digest is still A0 until promotion, so tenancy.current.A stays 0. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-08-18 15:22:52 +02:00
..
directory	Add directory group resolver adapters	2026-05-17 07:24:50 +02:00
keycloak	Add Keycloak authorization adapter path	2026-05-17 07:18:45 +02:00
relationship	Add relationship PDP adapter boundary	2026-05-17 07:06:14 +02:00
rule	Add rule PDP adapter boundary	2026-05-17 07:13:27 +02:00
topaz	Implement Topaz adapter	2026-05-17 06:58:04 +02:00
doc.go	Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton	2026-05-16 01:54:44 +02:00