Milpa Auth v0.1.0
Runtime-native identity vocabulary for Milpa: the typed Actor, AuthContext and AuthState primitives, an opaque Credential with explicit redaction/refusal semantics, and the CredentialVerifier, AuthContextFactory and SessionStore contracts. The trusted producer of the context policies need — fail-closed by construction, zero framework, zero ORM.
Modules declare the capabilities they provide and require, expose tools an agent can invoke, and gate mutating actions behind verification. The contract loop that runs through the whole system:
plugin → capability → tool → verification → event → result