Taahir Ahmed 8ea4abe1a3 ateom/actor ID split: Define MintAteomActorCertificate (#1626) ...

We need to draw a strong distinction between credentials that will be
wielded directly by actor logic, and credentials used by system
components on behalf of an actor. This will help us avoid attacks where
an actor pretends to be a system component.
    
Ateom certificates are requested by ateom/atelet and used for the
atunnel connection to the egress gateway. They have a SPIFFE URI like
`spiffe://${trustdomain}/ateom-for-actor/${atespace}/${actor}`.
    
Actor certificates are requested by the egress gateway and used for
opening outbound requests on behalf of the actor. They have a SPIFFE URI
like `spiffe://${trustdomain}/actor/${atespace}/${actor}`. Note, this
use case is not actually implemented yet.

2026-09-23 17:17:35 +00:00

..

capacity_test.go

ateom/actor ID split: Define MintAteomActorCertificate (#1626)

2026-09-23 17:17:35 +00:00

capacity.go

ateom/actor ID split: Define MintAteomActorCertificate (#1626)

2026-09-23 17:17:35 +00:00

certificate_test.go

ateom/actor ID split: Define MintAteomActorCertificate (#1626)

2026-09-23 17:17:35 +00:00

certificate.go

ateom/actor ID split: Define MintAteomActorCertificate (#1626)

2026-09-23 17:17:35 +00:00

main_test.go

multi-actor worker API (#1283)

2026-09-03 21:19:21 -07:00