tegwick 57773aa8a2 MASON-WP-0015-T06: apply as the scoped ops-mason-builder identity ... The default path is user ops-mason-builder. Token mint, pod create, and serviceaccount impersonation are no. Admin stays on the attended warden lane. Negative-scope verify treats a denied get as the proof, and the CCR test interpreter can import the platform generator. Assistant: grok Assistant-Session: 01a16071-5425-78d3-80b4-20fe2ee30f0a		2026-10-22 08:58:21 +02:00
..
intakes.md	MASON-WP-0015-T06: apply as the scoped ops-mason-builder identity	2026-10-22 08:58:21 +02:00