New CCR request type broker-issuer-binding: an OIDC role on netkingdom that carries only the broker issuer policy (loopback callbacks, 15m, 8 uses, no default policy); the apply refuses unless the live issuer policy matches source. Founder chose net-kingdom-admins + aal2 on 2026-10-10. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 469992@bnt-lap001 Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9 |
||
|---|---|---|
| .. | ||
| coding-agent-approle.json | ||
| coding-agent-jwt-role.json | ||
| credential-broker-keycape-client-secret-generate-oidc-role.json | ||
| external-secrets-keycape-secrets-engine-openbao.draft.json | ||
| fluid-telegram-hall-of-helix-oidc-role.json | ||
| informed-decision-sitting-requester-eso.draft.json | ||
| keycape-oidc-config.json | ||
| keycape-services-config.json | ||
| netkingdom-oidc-config.json | ||
| netkingdom-platform-admin-role.json | ||
| secrets-engine-jwt-role.json | ||