docs: how a Ratatoskr voting module authenticates to Bifrost (design) #37
Open
heimdall
wants to merge 1 commit from
heimdall/ratatoskr-voting-auth into main
pull from: heimdall/ratatoskr-voting-auth
merge into: GameCult:main
GameCult:main
GameCult:heimdall/chat-consent-gate
GameCult:heimdall/htmx-drop
GameCult:heimdall/susp-gaps
GameCult:heimdall/prefix-val
GameCult:self/suspension-survives-sign-in
GameCult:self/chat-pending-tail
GameCult:self/oidc-chat-tier
GameCult:self/oidc-limits-prune-brake
GameCult:heimdall/test-cultlib-path
GameCult:heimdall/drop-index-roles
GameCult:heimdall/desk-pin-vectors-de8a062a
GameCult:heimdall/desk-answer-fork-too-large
GameCult:heimdall/desk-pin-vectors-f6c9bf5
GameCult:heimdall/desk-read-fork-too-large
GameCult:heimdall/desk-bifrost-half
GameCult:heimdall/mill-ranked-read
GameCult:mouth-open-direct
GameCult:docs/dump-readable-by-restore
GameCult:heimdall/mouth-read-through
GameCult:heimdall/scope-cultlib-ts-names
GameCult:heimdall/reserved-identities
GameCult:heimdall/bifrost-guest-accounts
GameCult:heimdall/sealed-key-path
GameCult:heimdall/standard-close-concurrency
GameCult:heimdall/sealed-mind-intake
GameCult:heimdall/sealed-ballot-motion
GameCult:heimdall/deploy-main-plan
GameCult:eureka/deploy-plan-revise
GameCult:heimdall/feedback-receiver
GameCult:heimdall/delete-publish-workflow
GameCult:heimdall/workflow-runs-on-docker
GameCult:heimdall/host-only-cookies
GameCult:heimdall/pin-vote-refusal-branches
GameCult:heimdall/mouth-receipts-presence
GameCult:heimdall/chat-images-cut-a
GameCult:heimdall/estate-sim-purchased-stake
GameCult:heimdall/credit-arm
GameCult:heimdall/stale-estate-numbers
GameCult:heimdall/stake-vectors
GameCult:heimdall/estate-rule-sim
GameCult:heimdall/charter-amendment-proposal
GameCult:heimdall/mouth-media-line
GameCult:eureka-body/optimistic-send-mouth
GameCult:eureka-body/mouth-context-from-matrix
GameCult:eureka-body/mouth-per-persona-rooms
GameCult:eureka-body/mouth-many-peers
GameCult:gamecult-chat/bifrost-oidc-backchannel-logout
GameCult:gamecult-chat/bifrost-oidc-issuer
GameCult:security/bifrost-dependency-pins
GameCult:hands/heimdall-callback-signed
GameCult:hands/mill-votes-cut-5b
GameCult:hands/mill-votes-cut-5
GameCult:hands/mill-votes-cut-3
GameCult:hands/mill-votes-cut-4
GameCult:hands/mill-votes-cut-2
GameCult:hands/mill-votes-cut-1
GameCult:hands/mill-votes-cut-0a
GameCult:hands/watchdog-bifrost-retry
GameCult:hands/watchdog-bifrost-reader
GameCult:hands/watchdog-bifrost-suite
GameCult:hands/watchdog-bifrost-retire
GameCult:codex/bifrost-migration-metadata
2026-11-10
Heimdall
docs: design for Ratatoskr voting authentication to Bifrost
Public PKCE client, vote scopes, bearer-only /api/votes, exact-origin CORS, threat list and open decisions. Design only; no code. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>