# People and the break-glass authority, in SecurityCanon terms (standard section 3).
schema_version: "0.1"
service: platform
owner: "Founder (Bernd Worsch)"
declared_at: 2026-10-24
attestation:
  authored_by: claude-code
  basis: [docs/service-identity-inventory.md, docs/platform-root-custody.md, canon/standards/service-identity-privilege_v0.1.md]
  owner_confirmed: false
complete: false
identities:
  - name: platform-root
    principal_type: HUMAN
    purpose: "King credential: final authority, break-glass in production; build-mode authority outside production"
    grants:
      - {mode: SOVEREIGN, scope: platform, activation: BREAK_GLASS, environments: [PRODUCTION, RECOVERY]}
      - {mode: CONSTRUCT, scope: platform, activation: STANDING, environments: [DEVELOPMENT, TEST]}
    interactive_login: true
    second_factor: required
    custody: [offline-key]
    consumers: [{name: founder, kind: person}]
    owner: "Founder"
    rotation: {path: "Break-glass material: explicit maintenance window (Credential Management section 6)", coupling: []}
    status: active
    recovery: {needed: true, works_with_sso_down: false, in_crisis_list: true}
  - name: tegwick
    principal_type: HUMAN
    purpose: "Developer identity (CONSTRUCT @ product); its actual production reach is not established"
    grants:
      - {mode: CONSTRUCT, scope: product, activation: STANDING, environments: [DEVELOPMENT, TEST]}
    interactive_login: true
    second_factor: unknown
    custody: [unknown]
    consumers: [{name: founder, kind: person}]
    owner: "Founder"
    rotation: {path: "Personal credential; owner-managed", coupling: []}
    status: active