Jon Chery d7dc2d2aad fix(P11): SVID chain validation (REQ-126, F9) ...

---ci---
project: orca
phase: 11
milestone: v0.12
status: execute
---/ci---

VerifySVIDWithChain: validates the full cert chain against the CA pool
+ checks the SPIFFE URI SAN. Rejects certs from unknown CAs even with
correct URI (F9). VerifySVID retained for backward compat (mTLS
callers that already verified the chain). 2 new tests. Build + vet green.

2026-08-07 11:20:10 +00:00

..

oidc_test.go

feat(P04): OIDC client + auth CLI (REQ-144, D-239, D-242, D-246)

2026-08-07 10:59:55 +00:00

oidc.go

feat(P04): OIDC client + auth CLI (REQ-144, D-239, D-242, D-246)

2026-08-07 10:59:55 +00:00

SPIFFE_SPIKE_RESULT.md

feat(P01.5): SPIFFE SVID minting spike (REQ-076, gate C-08) — PASSES

2026-08-07 04:30:43 +00:00

spiffe_test.go

fix(P11): SVID chain validation (REQ-126, F9)

2026-08-07 11:20:10 +00:00

spiffe.go

fix(P11): SVID chain validation (REQ-126, F9)

2026-08-07 11:20:10 +00:00