Scene 047 minutes
An agent built by an external software vendor authenticates at a platform that has never seen it. The platform resolves it through the federation, builds a local client representation from the resolved metadata and issues a token.
The point. No pre shared client record exists anywhere, and CBA issued the vendor no key material. Withdrawing recognition in one place stops it everywhere.
It runs live against the deployed stack. When the recording is made it appears here without this page being edited, because the site looks for the clip on disk each time it serves. Until then, use the live paths below.
What this scene proves
Status is read from the tracker when this page is served. If a scene is listed against an objective that is not started, that is what it says.
TC-09 Evidenced ID Partners · Proof of concept
Federation bridge capability for existing authorization servers, including trust-chain resolution, client metadata resolution and dynamic client onboarding for Agent Identities.
docdocs/evidence/content-federation-bridge.mdTC-10 Building Raidiam · Both
The Trust Controller is the authoritative source of Agent Identity trust metadata, with downstream Identity Providers consuming it to establish local client representations and perform runtime token issuance.
docdocs/deployment-hostnames.md