Skip to content

Identity

zeroth.governance.identity

Shared identity models used across service, runs, approvals, and audit.

ActorIdentity

Bases: BaseModel

Stable actor identity recorded on runs, approvals, and audits.

AuthenticatedPrincipal

Bases: ActorIdentity

Authenticated request principal with request-only details.

AuthMethod

Bases: StrEnum

Supported request authentication methods.

PrincipalScope

Bases: BaseModel

Tenant and workspace scope carried by principals and resources.

ServiceRole

Bases: StrEnum

Built-in service roles used by route authorization.

Deployments may add custom role names through service configuration. Principals therefore carry strings while this enum remains the stable catalogue of built-in names.