feat(authz): kernel token verification, human principals & sign-out-everywhere (ARN-255 steps 1 + 3-kernel) - #407

Draft

rita-aga wants to merge 11 commits into

mainfrom

claude/arn-255-kernel-token-verification

Commits on Jul 18, 2026

feat(authz): ES256 JWT verification core for platform-issued tokens (ARN-255)

rita-aga
and
claude
committed

Commits on Jul 19, 2026

feat(authz): TrustedIssuer registry + JWT branch in the identity resolver (ARN-255)

rita-aga
and
claude
committed
test(authz): end-to-end TrustedIssuer JWT resolution against a real PlatformState

rita-aga
and
claude
committed
feat(authz): sign-out-everywhere + human principals + env issuer activation (ARN-255 step 3)

rita-aga
and
claude
committed

Commits on Jul 20, 2026