Answer the approver-client questions, and fix what checking them turned up
image.yaml #38 -Commit
a73da29093
pushed by
tegwick
feat(oidc): prepare one-shot upstream issuer proof without token disclosure
image.yaml #37 -Commit
6f33abddcf
pushed by
tegwick
Require typed issuer refusals in live registration verification
image.yaml #36 -Commit
dcebd46fa6
pushed by
tegwick
Ship the live-registration check both blocked tasks depend on
image.yaml #35 -Commit
2a8735173b
pushed by
tegwick
Establish the live state and find a rollout precondition for G10
image.yaml #34 -Commit
7dda967c27
pushed by
tegwick
Close the KEY-WP-0009 handoff gap and deliver the two blocked admissions
image.yaml #33 -Commit
7c9ed852ff
pushed by
tegwick
Reconcile packaging, bootstrap and migration credential handling
image.yaml #32 -Commit
3b72834bca
pushed by
tegwick
Give the runtime real readiness, graceful shutdown and stated limits
image.yaml #31 -Commit
d568b79223
pushed by
tegwick
Wire tenant_roles as explicit opt-in configuration
image.yaml #30 -Commit
a0f3cac122
pushed by
tegwick
Prove the migration against live directories and fix what that surfaced
image.yaml #29 -Commit
e729ad4c28
pushed by
tegwick
Make the replacement harness runnable and target a live issuer
image.yaml #28 -Commit
7534552754
pushed by
tegwick
Make snapshot attribute validation enforce a real rule
image.yaml #27 -Commit
21acb5cdd6
pushed by
tegwick
Make the Keycloak transform preserve or name every policy field
image.yaml #26 -Commit
e9fc8544ab
pushed by
tegwick
Record what the consolidated verifier's tests actually establish
image.yaml #25 -Commit
8707d375a2
pushed by
tegwick
chore(consistency): sync KEY-WP-0019 completion [auto]
image.yaml #24 -Commit
2be6c73d99
pushed by
tegwick
Move the caller verifier onto internal/jose
image.yaml #23 -Commit
3ec8404c87
pushed by
tegwick
Make the LLDAP export report its own completeness
image.yaml #21 -Commit
f7dd51b8d2
pushed by
tegwick
Reconcile the canonical model and discovery with the runtime
image.yaml #20 -Commit
a770ac67d0
pushed by
tegwick
Harden the authorization-code grant and UserInfo verification
image.yaml #19 -Commit
139b6ff351
pushed by
tegwick
Align approval registrations to the tenant:platform decision
image.yaml #18 -Commit
7a6666d1f9
pushed by
tegwick
Document tenant claim ownership and prove registration binding
image.yaml #17 -Commit
da7bc31d45
pushed by
tegwick
Add native verified login and service-token commands
image.yaml #16 -Commit
b989de4e90
pushed by
tegwick
Add bounded resource audiences and enforce browser scope grants
image.yaml #15 -Commit
403904b901
pushed by
tegwick
Implement KeyCape provider and service identity contracts
image.yaml #12 -Commit
efce3e9331
pushed by
tegwick
Finish KEY-WP-0008: registration handoff and client MFA isolation
image.yaml #11 -Commit
b6af6c5268
pushed by
tegwick
KEY-WP-0008: honor per-client mfaRequired and acr_values step-up
image.yaml #10 -Commit
3bef507cb8
pushed by
tegwick
Map platform-root group to platform operator
image.yaml #9 -Commit
90a20783e5
pushed by
tegwick