tegwick ca03da52c6 NK-WP-0054-T02: draft-2 of the Service Identity and Privilege standard after the founder's review ... Applied the founder's four decisions: OpenBao platform-admin binds aal2 (SI-8 MUST); the human administrator keeps directory admin rights through an admin group (SI-5); declarations start in this repository and move to the services; agents get their own class and rule SI-14. Finding F-1: the coding-agent role presents as a service against IAM Profile v0.3. Schema, validator and tests follow (37 pass). Rehearsals listed, not decided. Not ratified; owner review still open. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 328925@bnt-lap001 Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed		2026-10-24 22:50:01 +02:00
..
authelia.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
identity-provisioner.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
keycape.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
lldap.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
openbao.yaml	NK-WP-0054-T02: draft-2 of the Service Identity and Privilege standard after the founder's review	2026-10-24 22:50:01 +02:00
platform.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
postgresql.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00
privacyidea.yaml	NK-WP-0054-T03: service identity schema, offline validator and first declarations	2026-10-24 22:38:23 +02:00