Implemented and verified.
21 implemented capabilitiesResponsive identity boundary explorer · Worker-compatible HMAC-SHA256 envelope · Five-minute signature freshness window · Strict 32 KiB request bound · Secret-shaped field rejection · Public and confidential callback policy · Deterministic non-secret client identity · Signed retry contract compatibility · Exact replay and event conflict handling · Durable signed-event receipts · RFC 9728 protected-resource metadata · RFC 8414 authorization-server metadata · Exact OAuth resource indicator · PKCE S256 request validation · Exact redirect and least-scope checks · No authorization-code or token issuance · Idempotent conformance runs · Typed revocation outcomes · Append-only audit evidence · Atomic file persistence · Restart recovery
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
13 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.