feat(security): credential binding enforcement#1671

Merged

mergify[bot] merged 10 commits into

mainfrom

jsell/credential-rbac-enforcement

Jun 9, 2026

Commits on Jun 5, 2026

Commits on Jun 9, 2026

Merge branch 'main' of https://github.com/ambient-code/platform
jsell-rh
committed
Merge branch 'main' of https://github.com/ambient-code/platform
jsell-rh
committed
feat(rbac): implement credential binding authorization rules

jsell-rh
and
claude
committed
feat(rbac): add role_binding:delete to project:editor role

jsell-rh
and
claude
committed
feat(control-plane): hierarchical credential resolver + token-reader lifecycle

jsell-rh
and
claude
committed
test(security): credential binding enforcement integration + e2e tests

jsell-rh
and
claude
committed
fix(control-plane): exclude credential:owner bindings from resolver

jsell-rh
and
claude
committed
fix(control-plane): address CodeRabbit review findings

jsell-rh
and
claude
committed