coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

RPF-WP-0054-T05: issuer binding CCR-2026-0043 (net-kingdom-admins, aal2) and probe session
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
New CCR request type broker-issuer-binding: an OIDC role on netkingdom that
carries only the broker issuer policy (loopback callbacks, 15m, 8 uses, no
default policy); the apply refuses unless the live issuer policy matches
source. Founder chose net-kingdom-admins + aal2 on 2026-10-10.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
This commit is contained in:
codex 2026-10-10 10:18:58 +02:00
parent c8022c0798
commit b328d36a20
6 changed files with 434 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
scripts/credential-change.py
View file

@ -824,6 +824,7 @@ LANE_MODULES = {
"service-jwt-login": "service_jwt_lane",
"workload-kv-operator-matrix": "operator_matrix_lane",
"custody-generate-grant": "broker_grant_lane",
"broker-issuer-binding": "issuer_binding_lane",
}