Repository navigation

GRAPHOS-IDENTITY-R009.2.2: OIDC ID-token claim checks with typed refusal - #231

Merged

43 commits merged into

mainfrom

deliver-identity-r009-2-2

Oct 10, 2026

Merged

GRAPHOS-IDENTITY-R009.2.2: OIDC ID-token claim checks with typed refusal#231
43 commits merged into
mainfrom
deliver-identity-r009-2-2

Commits on Oct 10, 2026
- fleet: route the protocol-family probe through the catalog-or-harvest resolver
  
  Knucklessg1
  and
  claude
  committed
  ddb10c0
- Split GRAPHOS-HOST-R005.2.1 and .2.3 into per-operation children
  
  Knucklessg1
  and
  claude
  committed
  8373649
- GRAPHOS-OPS-R032.2.1: identity composition-root constructor returning ports
  
  Knucklessg1
  and
  claude
  committed
  3dc5a36
- GRAPHOS-IDENTITY-R008.2: API-key scope intersection and revocation
  
  Knucklessg1
  and
  claude
  committed
  d45ad77
- Merge PR #210 into bulk land
  Knucklessg1
  committed
  eed4ec1
- Merge PR #211 into bulk land
  Knucklessg1
  committed
  7f72286
- Merge PR #212 into bulk land
  Knucklessg1
  committed
  68a60f1
- Merge PR #213 into bulk land
  Knucklessg1
  committed
  7b36d6d
- chore(specs): regenerate status for the third 2026-10-10 landing train
  
  Knucklessg1
  and
  claude
  committed
  3dcb050
- Split GRAPHOS-OPS-R032.2.3 into per-module children
  
  Knucklessg1
  and
  claude
  committed
  316ed1e
- Map legacy sync action to ingest.sources.sync
  
  Knucklessg1
  and
  claude
  committed
  567a2b4
- GRAPHOS-MCP-RESOURCES-R003: split into guard (.1) and publish-step wiring (.2)
  
  Knucklessg1
  and
  claude
  committed
  41451e8
- GRAPHOS-A2A-002-R005: bind no-advisory/cached/partial admission test
  
  Knucklessg1
  and
  claude
  committed
  6376214
- GRAPHOS-OPS-R020.3.1.1: add ingest.packs.list op, split R020.3.1
  
  Knucklessg1
  and
  claude
  committed
  16c9b2b
- Merge PR #215 into bulk land
  Knucklessg1
  committed
  47f0cf0
- Merge PR #216 into bulk land
  Knucklessg1
  committed
  8b94b2e
- Merge PR #217 into bulk land
  Knucklessg1
  committed
  d0a88f3
- Merge PR #218 into bulk land
  Knucklessg1
  committed
  f626c1f
- Merge PR #219 into bulk land
  Knucklessg1
  committed
  4bc51b8
- chore(specs): regenerate status for the fourth 2026-10-10 landing train
  
  Knucklessg1
  and
  claude
  committed
  bdf40f7
- GRAPHOS-OPS-R020.3.1.2: add ingest.jobs.status read op
  
  Knucklessg1
  and
  claude
  committed
  634a344
- GRAPHOS-MCP-RESOURCES-R003.1: add require_reconciled_for_swap guard
  
  Knucklessg1
  and
  claude
  committed
  965d343
- chore(clones): re-review the ops/ingest operations() register entry
  
  Knucklessg1
  and
  claude
  committed
  2d90ac5
- Merge PR #221 into bulk land
  Knucklessg1
  committed
  aa856c2
- Merge PR #222 into bulk land
  Knucklessg1
  committed
  65cfc64
- chore(specs): regenerate status after adding #221 and #222
  
  Knucklessg1
  and
  claude
  committed
  1f5c37d
- Split GRAPHOS-OPS-R032.2.3.2: ports in run_web_ui vs supply from mcp_server
  
  Knucklessg1
  and
  claude
  committed
  e101e08
- GRAPHOS-IDENTITY-R010.2.1: group-DN-to-role mapping; split R010.2 into children
  
  Knucklessg1
  and
  claude
  committed
  9fc4eae
- GRAPHOS-IDENTITY-R009.2.1: ordered OIDC claim-to-rule evaluation
  
  Knucklessg1
  and
  claude
  committed
  0714a7b
- GRAPHOS-IDENTITY-R011.2.1: split SCIM server surface, add typed ScimUser model
  
  Knucklessg1
  and
  claude
  committed
  e92d812
- R012.2.1: SAML parsed-assertion model and condition checks
  
  Knucklessg1
  and
  claude
  committed
  fdbaebd
- GRAPHOS-OPS-R021.2.1: add retrieval.search read op; split R021.2
  
  Knucklessg1
  and
  claude
  committed
  e78a5e5
- GRAPHOS-MCP-RESOURCES-R004: bind status docs to gate vocabulary
  
  Knucklessg1
  and
  claude
  committed
  94ee721
- chore(clones): re-review the operations() register entry after ingest.jobs.status
  
  Knucklessg1
  and
  claude
  committed
  37e55a6
- Merge PR #223 into bulk land
  Knucklessg1
  committed
  4fe88bb
- Merge PR #224 into bulk land
  Knucklessg1
  committed
  60c5251
- Merge PR #225 into bulk land
  Knucklessg1
  committed
  70fc8c2
- Merge PR #226 into bulk land
  Knucklessg1
  committed
  9acfed8
- Merge PR #227 into bulk land
  Knucklessg1
  committed
  84dc3ab
- Merge PR #228 into bulk land
  Knucklessg1
  committed
  e73dc53
- Merge PR #229 into bulk land
  Knucklessg1
  committed
  5d91da6
- chore(specs): regenerate status and re-review registers after adding #223-#229
  
  Knucklessg1
  and
  claude
  committed
  ee1f8ce
- GRAPHOS-IDENTITY-R009.2.2: OIDC ID-token claim checks with typed refusal
  
  Knucklessg1
  and
  claude
  committed
  4ecc19a

Commits

Commits on Oct 10, 2026