FlowGuard API - v1.2.0-rc.2
    Preparing search index...

    Variable ActorInfoSchemaConst

    ActorInfoSchema: ZodReadonly<
        ZodObject<
            {
                id: ZodString;
                email: ZodNullable<ZodString>;
                displayName: ZodOptional<ZodNullable<ZodString>>;
                source: ZodEnum<
                    {
                        unknown: "unknown";
                        env: "env";
                        git: "git";
                        claim: "claim";
                        oidc: "oidc";
                    },
                >;
                assurance: ZodDefault<
                    ZodPipe<
                        ZodUnion<
                            readonly [
                                ZodLiteral<"verified">,
                                ZodLiteral<"best_effort">,
                                ZodLiteral<"claim_validated">,
                                ZodLiteral<"idp_verified">,
                            ],
                        >,
                        ZodTransform<
                            "best_effort"
                            | "claim_validated"
                            | "idp_verified",
                            "best_effort" | "claim_validated" | "idp_verified" | "verified",
                        >,
                    >,
                >;
                verificationMeta: ZodOptional<
                    ZodReadonly<
                        ZodObject<
                            {
                                issuer: ZodString;
                                audience: ZodArray<ZodString>;
                                keyId: ZodString;
                                algorithm: ZodString;
                                verifiedAt: ZodString;
                            },
                            $strip,
                        >,
                    >,
                >;
            },
            $strip,
        >,
    > = ...

    Resolved operator identity for audit attribution (P27/P34/P35a).

    Three-tier assurance model:

    • best_effort: operator-provided, no third-party verification (env/git/unknown)
    • claim_validated: schema + expiry validated from local claim file (claim source)
    • idp_verified: cryptographic IdP verification (oidc source, P35a)

    P35a adds verificationMeta for idp_verified actors to provide IdP provenance.

    P34 design doc: docs/actor-assurance-architecture.md