tegwick
48385816fd
Schema, validator (30 tests), make targets and eight declarations authored from the inventory, all unconfirmed by their owners. First run: 0 non-conformant, 12 unknown, 2 excepted, 5 planned, 6 conformant. Provisional: built against draft-1 before the founder's review. Building it changed the draft: custody is a list, SI-X1 now covers SI-9 and NAMING, and the reserved-name rule applies only to credential-holding identities (open question 7). Unknown is a finding for every class. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 328925@bnt-lap001 Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
34 lines
1.3 KiB
YAML
34 lines
1.3 KiB
YAML
# People and the break-glass identity. Provisional location (standard section 10, question 6).
|
|
schema_version: "0.1"
|
|
service: platform
|
|
owner: "Founder (Bernd Worsch)"
|
|
declared_at: 2026-10-24
|
|
attestation:
|
|
authored_by: claude-code
|
|
basis: [docs/service-identity-inventory.md, docs/platform-root-custody.md, canon/standards/credential-management_v0.2.md]
|
|
owner_confirmed: false
|
|
complete: false
|
|
identities:
|
|
- name: platform-root
|
|
classes: [break-glass]
|
|
purpose: "Final authority (king credential); not for routine or production use"
|
|
privilege_level: admin
|
|
interactive_login: true
|
|
second_factor: required
|
|
custody: [offline-key]
|
|
consumers: [{name: founder, kind: person}]
|
|
owner: "Founder"
|
|
rotation: {path: "Break-glass material: explicit maintenance window (Credential Management section 6)", coupling: []}
|
|
status: active
|
|
recovery: {needed: true, works_with_sso_down: false, in_crisis_list: true}
|
|
- name: tegwick
|
|
classes: [human]
|
|
purpose: "Developer identity: builds and tests the platform, Git and tooling"
|
|
privilege_level: unknown
|
|
interactive_login: true
|
|
second_factor: unknown
|
|
custody: [unknown]
|
|
consumers: [{name: founder, kind: person}]
|
|
owner: "Founder"
|
|
rotation: {path: "Personal credential; owner-managed", coupling: []}
|
|
status: active
|