Agent OS · Component · ops-identity-audit
Operations identity, permissions and audit trail
What it does
Manage operator accounts/sessions, TOTP step-up checks, role permissions and audited application-facing operations.
Core pattern
Step-up identity checks + role-based action audit
- Input
- Operator identity and requested operation
- Output
- Authorized session/action and audit record
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | login | login · roles · totp_enroll · step_up · audit_query |
| base_url | — | — | — |
| scope | — | — | — |
| roles | array | [] | — |
| session_policy | — | — | — |
Maturity and limits
TOTP replay migration, auth/audit tests and service-token/local-origin guards. Phase 2: source paths and implementation inspected statically; tests and external integrations were not executed. Maturity rates repository implementation, not a verified production deployment.
No root reuse license found; user conversations, memory and real-person profiles are sensitive; current local SQLite/ops boundaries need hardening for multi-tenant deployment. Current integration is intentionally local; full external identity platform is not complete.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- Lifestyle & consumer appsSource-supported industry
For work involving opt-in interactions, digital services and personal preferences, use step-up identity checks followed by role-based action audit.
- HealthcareTransferable use
For hospital appointment and administrative service desks, use step-up identity checks followed by role-based action audit.
Skills pack
Contract scaffold and deterministic mock
Download · 11KBSHA-256 b82335f7922cea03d1507aca52423e4cbb7c8df71754423cc8c44ab460445627
Related components
-
Local coding-agent execution governance
Pre-action policy decisions + human permission and audit
Working 1 pipeline -
Collaborative delivery, approvals and evidence gates
Draft and artifact versioning + human handoff approval
Working 4 pipelines -
Tenant identity, enterprise SSO, provisioning and access control
Organization membership sync + scoped role access
Working 1 pipeline -
Customer sessions, registration and verification
Account verification + session and access management
Working 1 pipeline