apiVersion: railiance.fabric/v1alpha1
kind: BindingAssertion
metadata:
  id: flex-auth.api.iam-profile-to-key-cape
  name: flex-auth IAM Profile binding
  owner: flex-auth
  repo: flex-auth
  domain: railiance
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  dependency_id: flex-auth.api.needs-iam-profile
  provider_capability_id: key-cape.iam-profile.issuer
  provider_interface_id: key-cape.iam-profile.oidc-discovery
  status: compatible
  rationale: key-cape is the lightweight IAM Profile implementation for Railiance workloads.