docs: record authority lookup State Hub bindings
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929
This commit is contained in:
tegwick 2026-09-28 18:21:02 +02:00
parent 9e016c5296
commit e82ace9b4d
2 changed files with 8 additions and 0 deletions

View file

@ -11,6 +11,7 @@ created: "2026-09-28"
updated: "2026-09-28"
related:
- HUB-WP-0012
state_hub_workstream_id: "54d99faf-4c53-5927-a82c-feca41de2cf3"
---
# Hub authority lookup
@ -24,6 +25,7 @@ workload grants, root entitlements and deployment acceptance remain separate.
id: USER-WP-0037-T01
status: done
priority: high
state_hub_task_id: "eb4c1a6c-3cf2-5195-9388-cb9db3190197"
```
Add an authorized service lookup for exact issuer/subject and scoped tenant.
@ -48,6 +50,7 @@ production deployment was added. T02/T03 retain those outstanding owner gates.
id: USER-WP-0037-T02
status: todo
priority: high
state_hub_task_id: "23a5c211-277b-561e-a4b3-0f8e99537cac"
```
With NetKingdom, specify explicit current root-grant custody/revocation and
@ -61,6 +64,7 @@ account and entitlement observations.
id: USER-WP-0037-T03
status: todo
priority: high
state_hub_task_id: "c5d67725-c685-50f6-9db8-28114a34014b"
```
Expose a narrowly scoped read API with an independently authenticated Hub