List view

• Phase 7: Policy & Compliance Engines

  OPA policy evaluation, HashiCorp Vault PKI, SIEM integration (Splunk/Sentinel/Elastic), OpenTelemetry traces, SCIM lifecycle, device trust signals.

  No due date

  •0/6 issues closed
  0% complete6 open0 closed

• Phase 6: Identity Provider Integrations

  Native integrations with enterprise identity providers: Entra ID, Google Workspace, Okta/Auth0/OneLogin, Active Directory/LDAP, AWS/GCP/Azure Cloud IAM.

  No due date

  •0/5 issues closed
  0% complete5 open0 closed

• Phase 5: External Identity (OIDC + SPIFFE)

  Networks require valid OIDC JWT or SPIFFE JWT-SVID from configured issuer. Links 48-bit Pilot addresses to enterprise identities. Eliminates parallel trust island.

  No due date

  •0/4 issues closed
  0% complete4 open0 closed

• Phase 4: CA-Based Enrollment

  Replace shared tokens with CA-signed certificates. Per-network revocation lists. Identity expiry forces key rotation.

  No due date

  •0/4 issues closed
  0% complete4 open0 closed

• Phase 3: Enterprise Hardening

  Security hardening, resilience, observability, RBAC, protocol versioning, network policies, key lifecycle.

  No due date

  •8/9 issues closed
  88% complete1 open8 closed