Repository navigation

rfc: forge S3 tenant IAM - #30

Merged

pyropy merged 40 commits into

mainfrom

rfc/forge-s3-tenant-iam

Oct 5, 2026

Commits on Sep 9, 2026
- rfc: forge S3 tenant IAM
  
  pyropy
  and
  claude
  committed
  9519f3b
- rfc: drop batch principal creation
  
  pyropy
  and
  claude
  committed
  e71c82f
- rfc: key-less principals and Swarf principal invalidation
  
  pyropy
  and
  claude
  committed
  bfce039
Commits on Sep 10, 2026
- rfc: several service credentials, invalidation on any policy change, locked publish
  
  pyropy
  and
  claude
  committed
  a53db02
- rfc: self-signed invalidation, migrate CLI, locked principal removal
  
  pyropy
  and
  claude
  committed
  17eab0a
Commits on Sep 11, 2026
- rfc: one access-key route with an optional principal
  
  pyropy
  and
  claude
  committed
  747bed9
Commits on Sep 15, 2026
- rfc: clear gateway caches with a per-key marker revoked through /ucan/revoke
  
  pyropy
  and
  claude
  committed
  f61f474
Commits on Sep 16, 2026
- rfc: address review, define terms and add policy on bucket create
  
  pyropy
  and
  claude
  committed
  90dfa77
- rfc: write the create-request policy after the bucket row
  
  pyropy
  and
  claude
  committed
  fa323be
Commits on Sep 17, 2026
- refactor: s3:GetBucketVersioning and s3:GetBucketObjectLockConfiguration from bucket policy
  pyropy
  committed
  93bf8b9
- rfc: explicitly explain including the principalId access key creation body
  pyropy
  committed
  ead57c9
Commits on Sep 18, 2026
- Apply suggestion from @bajtos
  
  pyropy
  and
  bajtos
  authored
  a46b6dc
- rfc: address review, console keys, tenant removal, migration by scope
  
  pyropy
  and
  claude
  committed
  13b203b
Commits on Sep 22, 2026
- rfc: remove markers; grant delegations for every command
  pyropy
  committed
  bca83de
- rfc: address comments and rewrite using more natural tone
  pyropy
  committed
  c7fa78e
- rfc: keep authorize's per-request delegations keyed to themselves
  
  pyropy
  and
  claude
  committed
  502f33b
- rfc: Ingot refuses to cache delegations it has seen revoked
  
  pyropy
  and
  claude
  committed
  d2cd4a6
Commits on Sep 24, 2026
- rfc: name the labels Fil One writes its default statements under
  
  pyropy
  and
  claude
  committed
  b6d8eb3
Commits on Sep 25, 2026
- Update rfcs/2026-09-forge-s3-tenant-iam.md
  
  pyropy
  and
  alanshaw
  authored
  a0dbc2e
- rfc: drop the firehose-latency sentence from goal 3
  
  pyropy
  and
  claude
  committed
  5b56d2b
- rfc: define concepts before listing goals
  
  pyropy
  and
  claude
  committed
  b75e768
- rfc: say why the access-key body has no type field
  
  pyropy
  and
  claude
  committed
  4182719
- rfc: drop the tenant creation section
  
  pyropy
  and
  claude
  committed
  4011c5c
- rfc: state the principal routes' common prefix correctly
  
  pyropy
  and
  claude
  committed
  249f12b
- rfc: list a principal's keys through the tenant key-list route
  
  pyropy
  and
  claude
  committed
  5426ef9
- rfc: say what the principal tombstone is for
  
  pyropy
  and
  claude
  committed
  9d489de
- rfc: an empty policy is rejected; deletion is a separate request
  
  pyropy
  and
  claude
  committed
  32cdd4a
- rfc: the revoked set only withholds caching
  
  pyropy
  and
  claude
  committed
  957c026
- rfc: policy lists are sets and the ETag is a CID
  
  pyropy
  and
  claude
  committed
  1ccc532
- rfc: read and write bucket policies over S3 through /s3/bucket/policy
  
  pyropy
  and
  claude
  committed
  b4bb353
Commits on Sep 28, 2026
- rfc: one result shape for every /s3/bucket/policy method
  
  pyropy
  and
  claude
  committed
  8ef0b04
Commits on Sep 30, 2026
- rfc: improve writing
  pyropy
  committed
  ebdb3e3
- rfc: the console signs member traffic with its service key
  
  pyropy
  and
  claude
  committed
  eede97a
- rfc: the console also creates service keys for Owners and Admins
  
  pyropy
  and
  claude
  committed
  dfbfd36
Commits on Oct 1, 2026
- rfc: state the lock order and strip a removed principal's policies before locking it
  
  pyropy
  and
  claude
  committed
  0559808
Commits on Oct 2, 2026
- rfc: match the text to what Hilt does on the points Codex raised
  
  pyropy
  and
  claude
  committed
  15070aa
- Update rfcs/2026-09-forge-s3-tenant-iam.md
  
  pyropy
  and
  alanshaw
  authored
  e0f0e4e
- rfc: state the concurrency guarantees and trim implementation detail
  
  pyropy
  and
  claude
  committed
  e51e346
Commits on Oct 5, 2026
- rfc: write the policy after the create and use AWS field names
  
  pyropy
  and
  claude
  committed
  113d4de
- rfc: compute the policy ETag over a DAG-JSON encoding of sets
  
  pyropy
  and
  claude
  committed
  9b79061

Commits

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Commits on Sep 11, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 22, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 28, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 5, 2026