Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Heimdall 673713a015 Step-up: build the authorize URL before claiming the launch (a refused step-up no longer burns the state); pin the strict step_up parse with a signed forgery; document backend_callback and mixed-version limits ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>		2026-11-12 23:21:12 +00:00
..
app-profiles	Joystick custody needs a creator binding, at start and at the callback	2026-10-19 14:34:24 +02:00
answer-collector-consent.md	Note the two-clock comparison in the training rule as an open gap	2026-11-10 17:12:15 +00:00
architecture.md	Connect start: pin the app-secret gate on every managed provider, refuse blank targets (#9)	2026-11-09 12:18:26 +00:00
eve-access-plugin.md	Add Eve access plugin and private auth plane	2026-08-22 00:44:57 +02:00
implementation-plan.md	Docs: map managed credential custody, the callback mint and the open follow-ups	2026-10-19 15:49:34 +02:00
joystick-consent-flow.md	Refusal return contract: pin the fragment, carry the attempt id, document it	2026-11-08 13:50:58 +00:00
service-contract.md	Step-up: build the authorize URL before claiming the launch (a refused step-up no longer burns the state); pin the strict step_up parse with a signed forgery; document backend_callback and mixed-version limits	2026-11-12 23:21:12 +00:00
verse-service-contract.md	Docs: startRequiresAppCaller, and Heimdall authenticates while Bifrost issues identity	2026-10-22 18:14:37 +02:00