giles 064bbf18b3 identity: service facade api.sx — login/verify/revoke/logout (10 tests, Phase 1 complete) ...

identity:start() spawns one coordinator owning the token table + session
registry and exposes the whole-domain ops. The coordinator is the owner
sessions notify on idle timeout, so an expired session deregisters itself
— timeout-driven, never swept. verify/2 answers identity only ({active,
Subject, Client, Scope}); permission is delegated to acl. 39/39.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 00:00:05 +00:00

4.6 KiB

Raw Blame History

View Raw