ADR-014: Google OAuth as the agent's own identity, not service account + delegation
Context
4 docs tagged with "security"
View all tagsADR-021: API URL scheme, versioning & gateway authentication
Companion to ADR-020 (which covers the
PostgreSQL configuration
Provisioning, credentials, connectivity, rotation, ORM usage, and guardrails for Aucert's PostgreSQL instances
Secrets management
How Aucert manages secrets across Azure Key Vault, K8s secrets, and the Astra Token Vault — current state, known gaps, and the migration to Workload Identity