tegwick
d654f8a6ec
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
29 lines
1.2 KiB
YAML
29 lines
1.2 KiB
YAML
# KeyCape client for the synthetic MFA journey (NK-WP-0056-T09). Accepted by the founder 2026-10-31.
|
|
# Public PKCE client; the redirect URI is never served: the runner reads the code from the
|
|
# Location header. mfa_required pins MFA, and the runner also requests acr urn:netkingdom:aal2.
|
|
# access_groups is required by the type; synthetic-journey has no members and no service maps it.
|
|
apiVersion: netkingdom.io/security-case/v0.1
|
|
kind: SecurityCase
|
|
spec:
|
|
id: nk-synthetic-journey
|
|
type: oidc-browser-relying-party@1.1
|
|
status: accepted
|
|
acceptance:
|
|
at: "2026-10-31"
|
|
record: "Founder accepted the case as proposed in session 2026-10-31 (NK-WP-0056-T09; hub decision 91323969; CCR-2026-0057 approved railiance-platform 2ac9786)"
|
|
by:
|
|
- {role: owner, name: founder}
|
|
- {role: founder, name: founder}
|
|
owner:
|
|
repo: net-kingdom
|
|
person: founder
|
|
parameters:
|
|
client_id: nk-synthetic-journey
|
|
display_name: NetKingdom synthetic journey
|
|
redirect_uris: https://journey.invalid/callback
|
|
allowed_scopes: openid,profile,email,groups
|
|
client_type: public
|
|
mfa_required: "true"
|
|
access_groups: synthetic-journey
|
|
consuming_service: synthetic-journey
|
|
consumer_owner_repo: net-kingdom
|