coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Adapt USER-WP-0021 and USER-WP-0023 to published policy-nexus contracts
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m1s
Details

Browse source 
IAM Profile v0.3 and Tenancy Posture v0.1 are now live on
policy.coulomb.social. Close the portal expansion workplan against those
documents, keep the flex-auth live A2 probe waiting, and forward optional
tenant_roles to flex-auth without authorizing from them locally.
This commit is contained in:
tegwick 2026-08-19 09:51:08 +02:00
parent 166788228d
commit f762161d84
13 changed files with 109 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/portal-threat-model.md
View file

@ -46,4 +46,7 @@ as externally complete. Compensation is idempotent and operator-visible.
Enterprise SAML/OIDC federation, SCIM and corporate directory synchronization
remain provider adapters. Their external ownership metadata and identity links
must fit the existing neutral boundaries rather than becoming user-engine
domain dependencies.
domain dependencies. The published target is IAM Profile v0.3 Keycloak
expanded mode
(`https://policy.coulomb.social/standards/iam-profile/v0.3/`); a dedicated
workplan is created only when a tenant demands those integrations.