feat(iam) policy evaluation stack (WIP!) - #135

Draft

snazy wants to merge 5 commits into

floci-io:mainfrom

snazy:iam-policy-evaluation-stack

Commits on Sep 9, 2026

feat(iam): add CEL allow-policy evaluator
snazy
committed
8b3d702
feat(sts): preserve IAM principal on downscoped tokens
snazy
committed
95d05d2
feat(iam): enforce Cloud Storage bucket IAM policies
snazy
committed
12f559e
feat(iam): enforce Cloud Storage object IAM policies
snazy
committed
160262c
feat(iam): support IAM-aware downscoped GCS credentials
snazy
committed
8b4ca5d