# Claim envelope a key-cape (lightweight mode) deployment emits for an
# authenticated human user. Profile-conformant minimum: required claims
# only, single audience, simple roles list, OIDC standard amr values.
#
# Reference: docs/iam-profile-consumption.md, NetKingdom IAM Profile v0.2
# "Core Claims" and "Local Development Profile".

iss: https://idp.netkingdom.local/keycape
sub: user-7f9e2b
aud:
  - flex-auth
exp: 4102444800  # 2100-01-01, kept far-future for stable fixtures
iat: 1767225600  # 2026-01-01
tenant: tenant:platform
principal_type: human
preferred_username: ada
email: ada@netkingdom.local
name: Ada Lovelace
scope: openid profile hub:read
roles:
  - viewer
amr:
  - pwd
acr: "1"
groups:
  - /markitect/readers
assurance:
  level: aal1
  methods:
    - pwd
  mfa: false
  source: key-cape
  at: 1767225600