Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Heimdall 9f5a0e6938 Bind link mode to its initiator and redeem to its target ... Link start needs an authenticated app and an initiatingAccountId, carried in the signed state. The callback refuses an identity held by another account (link_initiator_mismatch) and attaches an unlinked one to the initiator. auth_completions stores target_id; redeem compares it and answers completion_target_mismatch without consuming the code. Link completions are redeemed only by the authenticated app. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>		2026-11-02 13:38:51 +00:00
..
app-profiles	Joystick custody needs a creator binding, at start and at the callback	2026-10-19 14:34:24 +02:00
architecture.md	Docs: map managed credential custody, the callback mint and the open follow-ups	2026-10-19 15:49:34 +02:00
eve-access-plugin.md	Add Eve access plugin and private auth plane	2026-08-22 00:44:57 +02:00
implementation-plan.md	Docs: map managed credential custody, the callback mint and the open follow-ups	2026-10-19 15:49:34 +02:00
service-contract.md	Bind link mode to its initiator and redeem to its target	2026-11-02 13:38:51 +00:00
verse-service-contract.md	Add Eve access plugin and private auth plane	2026-08-22 00:44:57 +02:00