18 lines
474 B
Markdown
18 lines
474 B
Markdown
# ADR 0004: Keychain And Auth Model
|
|
|
|
## Status
|
|
|
|
Accepted.
|
|
|
|
## Decision
|
|
|
|
The keychain is SSH-rooted and models admin keys, users, devices, nodes, agents,
|
|
and endpoint bindings. Resource authorization is represented as signed operation
|
|
logs reduced into a current permissions view.
|
|
|
|
Mutable ACL blobs are not the primary source of truth.
|
|
|
|
## Consequences
|
|
|
|
The system can answer why an operation is allowed or denied and can evolve toward
|
|
local-first multi-user authorization.
|