tegwick 4a915ce6c7 NK-WP-0026 finished: user-engine caller identity verified live against railiance01 ... T02 done. Deployed user-engine digest c501aeb2 reads the projected flex-auth token per decision (verified in the running container); flex-auth-user-engine 138aa347 serves with caller-auth enforce. Probes: valid 200 decision:d9aef25f08e17b84, missing token 401, wrong-system 403. Closes manifest drift: runtime.yaml pinned e3b5f65b, the digest T01 warned against, while the cluster ran c501aeb2. Re-applying it would have rolled the portal back to an image that cannot authenticate to a PDP now in enforce. kubectl diff is now empty. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-08-19 22:01:12 +02:00
..
schemas	Publish tenancy posture draft-8 contract	2026-08-18 12:15:41 +02:00
standards	NK-WP-0026 finished: user-engine caller identity verified live against railiance01	2026-08-19 22:01:12 +02:00