tegwick
ac66753bd4
Schema, validator, fixtures, declarations and tests (40 pass) now use the imported principal_type and authority grants MODE @ SCOPE with activation and environments, estate conventions bind and service-admin, unknown placeholders, and an elimination path on every exception. SI-4 and SI-7 became decidable. Before/after over the same declarations: 1/11/2/5/6 to 1/10/2/5/7 (non-conformant/unknown/excepted/planned/ conformant); the only move is KeyCape's secrets-engine-openbao client, whose scope is established. lldap/admin is now also excepted under SI-4. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 328925@bnt-lap001 Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
37 lines
1.6 KiB
YAML
37 lines
1.6 KiB
YAML
# People and the break-glass authority, in SecurityCanon terms (standard section 3).
|
|
schema_version: "0.1"
|
|
service: platform
|
|
owner: "Founder (Bernd Worsch)"
|
|
declared_at: 2026-10-24
|
|
attestation:
|
|
authored_by: claude-code
|
|
basis: [docs/service-identity-inventory.md, docs/platform-root-custody.md, canon/standards/service-identity-privilege_v0.1.md]
|
|
owner_confirmed: false
|
|
complete: false
|
|
identities:
|
|
- name: platform-root
|
|
principal_type: HUMAN
|
|
purpose: "King credential: final authority, break-glass in production; build-mode authority outside production"
|
|
grants:
|
|
- {mode: SOVEREIGN, scope: platform, activation: BREAK_GLASS, environments: [PRODUCTION, RECOVERY]}
|
|
- {mode: CONSTRUCT, scope: platform, activation: STANDING, environments: [DEVELOPMENT, TEST]}
|
|
interactive_login: true
|
|
second_factor: required
|
|
custody: [offline-key]
|
|
consumers: [{name: founder, kind: person}]
|
|
owner: "Founder"
|
|
rotation: {path: "Break-glass material: explicit maintenance window (Credential Management section 6)", coupling: []}
|
|
status: active
|
|
recovery: {needed: true, works_with_sso_down: false, in_crisis_list: true}
|
|
- name: tegwick
|
|
principal_type: HUMAN
|
|
purpose: "Developer identity (CONSTRUCT @ product); its actual production reach is not established"
|
|
grants:
|
|
- {mode: CONSTRUCT, scope: product, activation: STANDING, environments: [DEVELOPMENT, TEST]}
|
|
interactive_login: true
|
|
second_factor: unknown
|
|
custody: [unknown]
|
|
consumers: [{name: founder, kind: person}]
|
|
owner: "Founder"
|
|
rotation: {path: "Personal credential; owner-managed", coupling: []}
|
|
status: active
|