Complete IAM, audit attestation, and entitlement lease security slice - #45

Merged

BeforeLights merged 36 commits into

devfrom

feat/iam-security-completion

Aug 3, 2026

Commits on Aug 3, 2026

feat(iam): define service account identity contract
BeforeLights
committed
265923b
feat(iam): scope service account permissions
BeforeLights
committed
9c238e8
feat(iam): add service account repository port
BeforeLights
committed
1db0186
feat(iam): authorize service account lifecycle
BeforeLights
committed
4a23c05
feat(iam): generate one-time service account secrets
BeforeLights
committed
9ebad8f
feat(iam): persist service account records
BeforeLights
committed
87530e7
feat(iam): add service account prisma adapter
BeforeLights
committed
73b4d99
feat(iam): expose service account lifecycle api
BeforeLights
committed
e32ea58
feat(iam): resolve service accounts by secret digest
BeforeLights
committed
7bf5ba0
feat(iam): authenticate service account credentials
BeforeLights
committed
d02aa7e
feat(audit): register service account lifecycle actions
BeforeLights
committed
03ef9db
feat(iam): publish service account api contract
BeforeLights
committed
528f0c9
feat(audit): add signed seal attestations
BeforeLights
committed
f015b11
feat(bua): issue bounded entitlement leases
BeforeLights
committed
34b79bc
feat(bua): persist offline entitlement leases
BeforeLights
committed
796a681
feat(bua): persist entitlement lease schema
BeforeLights
committed
52d1607
feat(bua): add entitlement lease repository
BeforeLights
committed
4d057e4
feat(bua): issue and verify entitlement leases
BeforeLights
committed
5c25a81
feat(bua): expose entitlement lease api
BeforeLights
committed
ecfbb25
feat(bua): add provider-neutral lease signing
BeforeLights
committed
89f7bfb
fix(bua): bind lease acceptance to canonical payload
BeforeLights
committed
82b0e22
feat(audit): define seal attestation repository port
BeforeLights
committed
ea59eb1
feat(audit): add in-memory seal attestations
BeforeLights
committed
3705546
feat(audit): persist seal attestation schema
BeforeLights
committed
304eecf
feat(audit): add Prisma seal attestation adapter
BeforeLights
committed
2834320
feat(audit): issue and verify seal attestations
BeforeLights
committed
fb9d5c2
feat(audit): compose attestation providers
BeforeLights
committed
4b40c9b
feat(audit): expose attestation api
BeforeLights
committed
a100a75
fix(bua): validate entitlement snapshot plans
BeforeLights
committed
cb0dd27
feat(bua): compose HMAC lease signing
BeforeLights
committed
e4ad354
docs(traceability): record IAM AUD BUA security slice
BeforeLights
committed
d9a8386
fix(traceability): keep audit ownership precise
BeforeLights
committed
c9ebd1f
chore: format IAM and entitlement security slice
BeforeLights
committed
99141b9
fix(iam): satisfy service account lint guard
BeforeLights
committed
c2442ad
test(api): track security migration and route contracts
BeforeLights
committed
20ceddd
fix(deps): pin patched fast-uri release
BeforeLights
committed
df4d0a2