tegwick 894761477f MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane ... key-cape confirmed groups_claim=groups, bound group fluid-telegram-operators, assurance aal2 and the three openbao-admin callbacks. The OIDC executor now pins /assurance/level=aal2 (bound_claims_type=string) and accepts the exact operator-tunnel UI callback; the retired public UI callback stays refused. T01 now waits on the founder go for the LLDAP group and a scoped survey grant. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0		2026-10-08 23:41:34 +02:00
..
ops_mason	MASON-WP-0005-T01: bind key-cape's confirmed claims for the operator lane	2026-10-08 23:41:34 +02:00