2 commits

Author	SHA1	Message	Date
Adam Moussa	5ed57abfd7	fix(iam): pin HCP boundary ARNs and bootstrap trust window (PLAT-143) ... Null on iam:PermissionsBoundary accepted any ceiling, including AdministratorAccess. Import apply cannot self-mutate hcptf-* while bootstrap trust is iam-bootstrap only; add a time-boxed exact StringEquals workspace grant instead of StringLike.	2026-09-02 11:19:04 -04:00
Adam Moussa	26f6ab879f	feat(iam): lock app-owned HCP IAM and add bootstrap SCP (PLAT-143)	2026-09-02 10:57:11 -04:00