Carlos Florênciostatus, system, specification_version, migration, owners
| status | system | specification_version | migration | owners | |
|---|---|---|---|---|---|
| draft | auth | 1 | in_progress |
|
Authorization and identity system
Purpose
The authorization and identity system owns authentication state, trust boundaries, session credentials, and authorization checks shared by Kandev surfaces.
Ownership
This system owns authenticated identity, trusted proxy handling, session and cookie boundaries, self-action guards, share-link access, and security checks for user and service requests.
Exclusions
- Provider credentials and external service connections belong to the integration system.
- Agent permission policy belongs to the agent system.
Migration record
Migration remains in progress while legacy source detail is extracted from the canonical requirement and system-design documents. Use the catalog command to find them.
Related systems
- Integrations: owns external provider auth.
- Platform: owns process-level security boundaries.