964 B
		
	
	
	
	
	
	
	
			
		
		
	
	
			964 B
		
	
	
	
	
	
	
	
2025-10-26 — Authority graph scopes documentation refresh
Summary
- Documented least-privilege guidance for the new graph:*scopes indocs/11_AUTHORITY.md(scope mapping, tenant propagation, and DPoP expectations).
- Extended the sample client table/config to include Cartographer and Graph API registrations so downstream teams can copy/paste the correct defaults.
- Highlighted the requirement to consume StellaOpsScopesconstants instead of hard-coded scope strings across services.
Next steps
| Team | Follow-up | Target | 
|---|---|---|
| Authority Core | Ensure /jwkschangelog references graph scope rollout in next release note. | 2025-10-28 | 
| Graph API Guild | Update gateway scaffolding to request scopes from StellaOpsScopesonce the host project lands. | Sprint 21 stand-up | 
| Scheduler Guild | Confirm Cartographer client onboarding uses the new sample secret templates. | Sprint 21 stand-up |