Add authority bootstrap flows and Concelier ops runbooks
This commit is contained in:
		| @@ -44,6 +44,8 @@ Capability flags let the host reason about what your plug-in supports: | ||||
|  | ||||
| **Configuration path normalisation:** Manifest-relative paths (e.g., `tokenSigning.keyDirectory: "../keys"`) are resolved against the YAML file location and environment variables are expanded before validation. Plug-ins should expect to receive an absolute, canonical path when options are injected. | ||||
|  | ||||
| **Password policy guardrails:** The Standard registrar logs a warning when a plug-in weakens the default password policy (minimum length or required character classes). Keep overrides at least as strong as the compiled defaults—operators treat the warning as an actionable security deviation. | ||||
|  | ||||
| ## 4. Project Scaffold | ||||
| - Target **.NET 10 preview**, enable nullable, treat warnings as errors, and mark Authority plug-ins with `<IsAuthorityPlugin>true</IsAuthorityPlugin>`. | ||||
| - Minimum references: | ||||
|   | ||||
		Reference in New Issue
	
	Block a user