2 docs tagged with "token-claims"

Default-deny ownership and evidence boundaries for attribute token claims

How Keymate projects a minimal organization-context reference into tokens while keeping current authorization facts outside the claim.