IAM Control PlanePhase 1 Foundation

Authoritative Administrative Identity & Access Control

IAM Control Plane Status

Operational

Phase 1 Security Foundation active. Runtime plane and control plane strictly isolated.

Test Step-UpAudit Logs
RFC 7523 ES256

Private Key Custody

Gateway signs client assertions. Private key never enters frontend or browser.

Authoritative

Relational RBAC

Fine-grained permissions evaluated dynamically. Zero reliance on legacy users.role.

iam_admin_audit

Append-Only Audit

Dedicated table in auth_db. Grants INSERT/SELECT only. No UPDATE/DELETE allowed.

5m / 15m / 8h

Session Governance

5m access token, 15m idle timeout, 8h max absolute lifetime.