aios/.agent/results/openclaw/v2r1c0-b3/identity-mapping-evidence.md

Identity Mapping Evidence

Generated: 2026-07-14

Schemas

1. AuthenticatedPrincipal - gate-kept by _PROVENANCE sentinel

   • Fields: principal_id
   • Factory: _verified() classmethod only
   • No external construction allowed

2. IdentityClaims (standard ingress)

   • Fields: tenant_id, cell_id, channel, channel_account_id, session_id
   • All validated by require_ident() in __post_init__

3. BridgeIngressClaims (bridge ingress)

   • Fields: tenant_id, cell_id, channel, channel_account_id, session_id, receipt
   • Receipt validated as non-empty string

4. AuthenticatedIngress container

   • Fields: principal (AuthenticatedPrincipal), claims (IdentityClaims), message

5. BridgeAuthenticatedIngress container

   • Fields: principal (AuthenticatedPrincipal), claims (BridgeIngressClaims), message

6. RuntimeIdentity (internal trust, no receipt)

   • Fields: tenant_id, cell_id, principal_id, channel, channel_account_id, session_id

IngressMode

Values: DISABLED, ENFORCED (default) Behavior:

• ENFORCED: signatures verified via HMAC-SHA256
• DISABLED: signature parsed but not verified (format check only)

Authentication Methods

• authenticate() → AuthenticatedIngress
• authenticate_bridge() → BridgeAuthenticatedIngress
• Both respect the configured IngressMode