TC-28 Not started ID Partners · Both
Automated Workload Identity registration through APIs and integration with CBA's existing SPIFFE/SPIRE-based workload attestation capability.
No artefact linked yet.
Scene 116 minutes
Binding a running instance
The agent provider attests an instance. The instance authenticates with a client attestation grant and is bound to the approved agent identity. A second instance without an attestation is refused.
The point. Identities are governed and instances are attested. That is the honest answer to whether this scales to a million agents, and it is where a workload attestation source plugs in.
What this scene proves
The objectives it answers, at their current status
Status is read from the tracker when this page is served. If a scene is listed against an objective that is not started, that is what it says.