apiVersion: railiance.fabric/v1alpha1
kind: DependencyDeclaration
metadata:
  id: flex-auth.api.needs-iam-profile
  name: flex-auth IAM Profile dependency
  owner: flex-auth
  repo: flex-auth
  domain: railiance
  source_links:
    - label: Seed dependency declaration
      path: fabric/README.md
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  consumer_service_id: flex-auth.api
  requires:
    capability_type: iam-profile-issuer
  interface:
    type: oidc-discovery
    version_constraint: ">=v1 <v2"
  auth:
    method: none
  criticality: critical
  data_classification: restricted
  fallback:
    mode: none
    description: Authorization decisions require trusted IAM Profile claims.