2026.8.6080139
Immutable
release. Only release title and notes can be modified.
2026.8.6080139
Added
- bind a workload identity, and pin the keys that anchor it
- L1 accepts keys a verified binding grants
- decide what makes a key binding count
- read key bindings off the registry as a trust base
- verify RS256, so a real IdP's tokens can be checked
Documentation
- record what makes a key binding count (ADR 0023)
Fixed
- decline garbage rather than raise on it