rfc: forge S3 tenant IAM - #30

Open

pyropy wants to merge 30 commits into

mainfrom

rfc/forge-s3-tenant-iam

Commits on Sep 9, 2026

rfc: forge S3 tenant IAM

pyropy
and
claude
committed
9519f3b
rfc: drop batch principal creation

pyropy
and
claude
committed
e71c82f
rfc: key-less principals and Swarf principal invalidation

pyropy
and
claude
committed
bfce039

Commits on Sep 10, 2026

rfc: several service credentials, invalidation on any policy change, locked publish

pyropy
and
claude
committed
a53db02
rfc: self-signed invalidation, migrate CLI, locked principal removal

pyropy
and
claude
committed
17eab0a

Commits on Sep 11, 2026

rfc: one access-key route with an optional principal

pyropy
and
claude
committed
747bed9

Commits on Sep 15, 2026

rfc: clear gateway caches with a per-key marker revoked through /ucan/revoke

pyropy
and
claude
committed
f61f474

Commits on Sep 16, 2026

rfc: address review, define terms and add policy on bucket create

pyropy
and
claude
committed
90dfa77
rfc: write the create-request policy after the bucket row

pyropy
and
claude
committed
fa323be

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Apply suggestion from @bajtos

pyropy
and
bajtos
authored
a46b6dc
rfc: address review, console keys, tenant removal, migration by scope

pyropy
and
claude
committed
13b203b

Commits on Sep 22, 2026

Commits on Sep 24, 2026

rfc: name the labels Fil One writes its default statements under

pyropy
and
claude
committed
b6d8eb3

Commits on Sep 25, 2026

Update rfcs/2026-09-forge-s3-tenant-iam.md

pyropy
and
alanshaw
authored
a0dbc2e
rfc: drop the firehose-latency sentence from goal 3

pyropy
and
claude
committed
5b56d2b
rfc: define concepts before listing goals

pyropy
and
claude
committed
b75e768
rfc: say why the access-key body has no type field

pyropy
and
claude
committed
4182719
rfc: drop the tenant creation section

pyropy
and
claude
committed
4011c5c
rfc: state the principal routes' common prefix correctly

pyropy
and
claude
committed
249f12b
rfc: list a principal's keys through the tenant key-list route

pyropy
and
claude
committed
5426ef9
rfc: say what the principal tombstone is for

pyropy
and
claude
committed
9d489de
rfc: an empty policy is rejected; deletion is a separate request

pyropy
and
claude
committed
32cdd4a
rfc: the revoked set only withholds caching

pyropy
and
claude
committed
957c026
rfc: policy lists are sets and the ETag is a CID

pyropy
and
claude
committed
1ccc532
rfc: read and write bucket policies over S3 through /s3/bucket/policy

pyropy
and
claude
committed
b4bb353