TC-03 Building Raidiam · Both
Token flow with an Agent Identity trust check before access is granted to a protected service or resource.
No artefact linked yet.
Scene 036 minutes
A trust check before access
The accounts payable agent resolves what the Payments API requires, obtains a sender constrained token and is admitted. A second agent without the capability role is refused, and the refusal states which check failed.
The point. The resource server re derives trust from the federation at the moment of the call. A denial is explainable, which is what the acceptance criteria ask for.
not yet recorded
This scene has not been recorded yet
It runs live against the deployed stack. When the recording is made it appears here without this page being edited, because the site looks for the clip on disk each time it serves. Until then, use the live paths below.
What this scene proves
The objectives it answers, at their current status
Status is read from the tracker when this page is served. If a scene is listed against an objective that is not started, that is what it says.