feat(security): credential binding enforcement - #1671

Merged

mergify[bot] merged 10 commits into

mainfrom

jsell/credential-rbac-enforcement

Jun 9, 2026

Commits on Jun 5, 2026

Commits on Jun 9, 2026

Merge branch 'main' of https://github.com/ambient-code/platform
jsell-rh
committed
044c148
Merge branch 'main' of https://github.com/ambient-code/platform
jsell-rh
committed
280807b
feat(rbac): implement credential binding authorization rules

jsell-rh
and
claude
committed
869c87d
feat(rbac): add role_binding:delete to project:editor role

jsell-rh
and
claude
committed
6dcffaf
feat(control-plane): hierarchical credential resolver + token-reader lifecycle

jsell-rh
and
claude
committed
6a2c28a
test(security): credential binding enforcement integration + e2e tests

jsell-rh
and
claude
committed
4cad7b1
fix(control-plane): exclude credential:owner bindings from resolver

jsell-rh
and
claude
committed
3fac808
fix(control-plane): address CodeRabbit review findings

jsell-rh
and
claude
committed
57aae13