coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record platform-root claim correction
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-29 21:33:31 +02:00
parent 2fdf21c379
commit 3710894120
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/NK-WP-0023-user-engine-portal-platform-integration.md
View file

@ -100,6 +100,13 @@ The helper image is digest-pinned and the service is non-root, read-only, and
NetworkPolicy restricted. Binky's user-chosen password and MFA acceptance NetworkPolicy restricted. Binky's user-chosen password and MFA acceptance
remain. remain.
2026-07-29 correction: live platform-root access exposed that the established
`net-kingdom-admins` bootstrap group was not mapped into the newer IAM
envelope. KeyCape `90a2078` now maps that group explicitly to
`tenant:platform` plus `platform-operator`, with regression coverage, while
tenant-admin mappings remain tenant scoped. The fixed image is Ready on
railiance01.
## T04 - Integrate authorization, email, audit, and events ## T04 - Integrate authorization, email, audit, and events
```task ```task