Files
git.stella-ops.org/docs/updates/2025-10-26-authority-graph-scopes.md
2025-10-28 15:10:40 +02:00

964 B

2025-10-26 — Authority graph scopes documentation refresh

Summary

  • Documented least-privilege guidance for the new graph:* scopes in docs/11_AUTHORITY.md (scope mapping, tenant propagation, and DPoP expectations).
  • Extended the sample client table/config to include Cartographer and Graph API registrations so downstream teams can copy/paste the correct defaults.
  • Highlighted the requirement to consume StellaOpsScopes constants instead of hard-coded scope strings across services.

Next steps

Team Follow-up Target
Authority Core Ensure /jwks changelog references graph scope rollout in next release note. 2025-10-28
Graph API Guild Update gateway scaffolding to request scopes from StellaOpsScopes once the host project lands. Sprint 21 stand-up
Scheduler Guild Confirm Cartographer client onboarding uses the new sample secret templates. Sprint 21 stand-up