rcourtman 2c96242487 Use stable SSO principals ...

Derive OIDC and SAML browser-session principals from provider-scoped subjects instead of mutable username or email claims.

Preserve compatibility by migrating legacy username/email RBAC assignments to the stable SSO principal when no authoritative group mapping is present, and pin the invariant in API/security contracts.

2026-05-04 00:16:31 +01:00

..

internal

Clear v6 prerelease-to-GA promotion gate

2026-04-20 16:33:03 +01:00

v6

Use stable SSO principals

2026-05-04 00:16:31 +01:00

control_plane.json

Resolve agent-ready operations target scope

2026-05-03 23:27:49 +01:00

control_plane.schema.json

Map legacy stable releases in control plane

2026-04-11 13:23:07 +01:00