Commit Graph

3 Commits

Author SHA1 Message Date
5b896ee2a2 feat(pki-server): expose security control administration
Expose principals, scoped assignments, direct grants, approvals,
break-glass access, disclosure policy and one-time capabilities through
the unified administrative HTTPS operation gateway.

Preserve default-deny authorization, immutable PKI authority, PII
boundaries and uncertainty-aware secret delivery.
2026-08-04 21:23:01 +02:00
d7793e5c49 feat(pki-server): add secure administrative HTTPS API
Add the mutually authenticated administrative HTTPS server with strict
typed JSON, bounded request execution, multi-authority authorization,
approval enforcement, safe auditing and finite shutdown.

Reuse one long-lived realm and PKI session without duplicating backend
authority or operation semantics.
2026-08-04 20:16:34 +02:00
e997996316 docs(pki): define server architecture and authorization model 2026-08-04 18:25:00 +02:00