Skip to content
Merged
Changes from all commits
Commits
Show all changes
40 commits
Select commit Hold shift + click to select a range
9519f3b
rfc: forge S3 tenant IAM
pyropy Sep 9, 2026
e71c82f
rfc: drop batch principal creation
pyropy Sep 9, 2026
bfce039
rfc: key-less principals and Swarf principal invalidation
pyropy Sep 9, 2026
a53db02
rfc: several service credentials, invalidation on any policy change, …
pyropy Sep 10, 2026
17eab0a
rfc: self-signed invalidation, migrate CLI, locked principal removal
pyropy Sep 10, 2026
747bed9
rfc: one access-key route with an optional principal
pyropy Sep 11, 2026
f61f474
rfc: clear gateway caches with a per-key marker revoked through /ucan…
pyropy Sep 15, 2026
90dfa77
rfc: address review, define terms and add policy on bucket create
pyropy Sep 16, 2026
fa323be
rfc: write the create-request policy after the bucket row
pyropy Sep 16, 2026
93bf8b9
refactor: s3:GetBucketVersioning and s3:GetBucketObjectLockConfigurat…
pyropy Sep 17, 2026
ead57c9
rfc: explicitly explain including the principalId access key creation…
pyropy Sep 17, 2026
a46b6dc
Apply suggestion from @bajtos
pyropy Sep 18, 2026
13b203b
rfc: address review, console keys, tenant removal, migration by scope
pyropy Sep 18, 2026
bca83de
rfc: remove markers; grant delegations for every command
pyropy Sep 22, 2026
c7fa78e
rfc: address comments and rewrite using more natural tone
pyropy Sep 22, 2026
502f33b
rfc: keep authorize's per-request delegations keyed to themselves
pyropy Sep 22, 2026
d2cd4a6
rfc: Ingot refuses to cache delegations it has seen revoked
pyropy Sep 22, 2026
b6d8eb3
rfc: name the labels Fil One writes its default statements under
pyropy Sep 24, 2026
a0dbc2e
Update rfcs/2026-09-forge-s3-tenant-iam.md
pyropy Sep 25, 2026
5b56d2b
rfc: drop the firehose-latency sentence from goal 3
pyropy Sep 25, 2026
b75e768
rfc: define concepts before listing goals
pyropy Sep 25, 2026
4182719
rfc: say why the access-key body has no type field
pyropy Sep 25, 2026
4011c5c
rfc: drop the tenant creation section
pyropy Sep 25, 2026
249f12b
rfc: state the principal routes' common prefix correctly
pyropy Sep 25, 2026
5426ef9
rfc: list a principal's keys through the tenant key-list route
pyropy Sep 25, 2026
9d489de
rfc: say what the principal tombstone is for
pyropy Sep 25, 2026
32cdd4a
rfc: an empty policy is rejected; deletion is a separate request
pyropy Sep 25, 2026
957c026
rfc: the revoked set only withholds caching
pyropy Sep 25, 2026
1ccc532
rfc: policy lists are sets and the ETag is a CID
pyropy Sep 25, 2026
b4bb353
rfc: read and write bucket policies over S3 through /s3/bucket/policy
pyropy Sep 25, 2026
8ef0b04
rfc: one result shape for every /s3/bucket/policy method
pyropy Sep 28, 2026
ebdb3e3
rfc: improve writing
pyropy Sep 30, 2026
eede97a
rfc: the console signs member traffic with its service key
pyropy Sep 30, 2026
dfbfd36
rfc: the console also creates service keys for Owners and Admins
pyropy Sep 30, 2026
0559808
rfc: state the lock order and strip a removed principal's policies be…
pyropy Oct 1, 2026
15070aa
rfc: match the text to what Hilt does on the points Codex raised
pyropy Oct 2, 2026
e0f0e4e
Update rfcs/2026-09-forge-s3-tenant-iam.md
pyropy Oct 2, 2026
e51e346
rfc: state the concurrency guarantees and trim implementation detail
pyropy Oct 2, 2026
113d4de
rfc: write the policy after the create and use AWS field names
pyropy Oct 5, 2026
9b79061
rfc: compute the policy ETag over a DAG-JSON encoding of sets
pyropy Oct 5, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading