coulomb/the-custodian
Archived
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Close IAM Profile integration gate

Browse Source
This commit is contained in:
Bernd Worsch
2026-06-28 00:20:05 +02:00
parent 7d823bd12f
commit 4158f05cff
4 changed files with 42 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
workplans/CUST-WP-0051-infrastructure-stabilization-metaplan.md
View File

@@ -454,8 +454,8 @@ mega-hub pattern.
Recommended order:
1. Keep `CUST-WP-0025-T03` as the remaining identity integration gate, targeting
the current IAM Profile v0.2 contract and local-identity or KeyCape issuer.
1. Keep the completed `CUST-WP-0025-T03` IAM Profile verifier/test as the
template for Core Hub auth consumers and future production issuer wiring.
2. Execute the rewritten Core Hub Phase 3 lane: ops evidence contract/read-model
gaps, deployed Core Hub smoke, activity-core Core Hub sink smoke,
migration/cutover readiness, and whynot-aligned first UI screens.
@@ -501,8 +501,8 @@ Progress 2026-06-27 Core Hub ops evidence contract:
- The spec defines API resources, non-secret evidence fields, event vocabulary,
service-inventory-to-widget/event mapping, readiness-summary inputs, and
read-model gaps to close before UI expansion or cutover claims.
- T07 sequencing now keeps `T03`, `T16`, `T17`, and `T18` open; T14 no longer
blocks the Core Hub replacement lane.
- T07 sequencing now keeps `T16`, `T17`, and `T18` open; T14 no longer blocks
the Core Hub replacement lane.
Progress 2026-06-27 CUST-WP-0052 closeout:
@@ -511,9 +511,19 @@ Progress 2026-06-27 CUST-WP-0052 closeout:
HelixForge/Railiance Forge practice, and posted non-secret State Hub
requirements to `railiance-apps` and `railiance-forge`.
- The remaining T07 gates are execution gates, not sequencing ambiguity:
`CUST-WP-0025-T03` identity integration, `T16/T17` deployed
evidence/cutover waits, and `T18` Core Hub operator UI first screens. `T14`
is complete as the ops evidence contract definition gate.
`T16/T17` deployed evidence/cutover waits and `T18` Core Hub operator UI
first screens. `T14` is complete as the ops evidence contract definition
gate.
Progress 2026-06-27 IAM Profile integration:
- Completed `CUST-WP-0025-T03` by adding Core Hub's reusable IAM Profile
verifier/dependency and a FastAPI fixture integration test covering OIDC
discovery, JWKS, authorization-code + PKCE token issuance, protected endpoint
access, required IAM Profile claims, missing-token rejection, wrong-audience
rejection, and production rejection of local-development issuers.
- Remaining T07 gates are now `CUST-WP-0025-T16`, `T17`, and `T18`; identity no
longer blocks the Core Hub replacement lane.
## Task: Create The Stable Pickup Checkpoint