Knowledge Base
Understand the concepts behind the answer.
Reusable knowledge types
Technical concepts; protocols and standards; authentication and authorization mechanisms; architecture patterns; implementation guides; troubleshooting; hands-on labs.
Shared explanations belong here. Link to them from questions, incident research and company architecture research.
Starter investigations
Authentication assurance & device trust
NIST defines authentication assurance levels and requirements for remote user authentication. This is not a workstation deployment blueprint.
L1 · Explain · D02
OIDC federation for deployment workloads
GitHub Actions supports OIDC federation with supporting cloud providers to obtain short-lived access credentials.
L2 · Analyze · D10
Workload identity & database credentials
SPIFFE specifies workload identities and identity documents used in workload authentication. Database integration depends on the selected database and implementation.
L2 · Analyze · D09
Delegation, impersonation & agent authority
RFC 8693 defines OAuth token exchange, including impersonation and delegation semantics. It does not prescribe an AI agent platform.
L4 · Design · D12