net-kingdom/tools/service-identity/declarations
tegwick a3bab9210b
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
NK-WP-0054-T02: agent ceiling is 60 minutes; ld-admin is LLDAP-only and admin stays the human's name
Founder clarifications: the SI-14 token ceiling is 60 minutes (3600 s); ld-admin is for
LLDAP only and the name admin remains the human platform administrator's wherever it
appears. The LLDAP rehearsal is now introducing ld-admin by configuration and demoting
admin, not renaming. The validator rejects a service-admin named admin.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 328925@bnt-lap001
Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
2026-10-24 22:57:23 +02:00
..
authelia.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00
identity-provisioner.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00
keycape.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00
lldap.yaml NK-WP-0054-T02: agent ceiling is 60 minutes; ld-admin is LLDAP-only and admin stays the human's name 2026-10-24 22:57:23 +02:00
openbao.yaml NK-WP-0054-T02: draft-2 of the Service Identity and Privilege standard after the founder's review 2026-10-24 22:50:01 +02:00
platform.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00
postgresql.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00
privacyidea.yaml NK-WP-0054-T03: service identity schema, offline validator and first declarations 2026-10-24 22:38:23 +02:00