- Shipped
- November 15, 2026 at 5:47 AM UTC
- Author
- Kamo
- Commit
- 9b00952
org_identity_connections (OrgIdentityConnection; STRING enums IdpProtocol, IdpTemplate, IdpConnectionStatus, IdpEnforcement, IdpJitStatus; domains honoured only over ownership-verified rows; client secret @JsonIgnore ciphertext), org_break_glass_members (PK org + member), scim_tokens (UNIQUE sha256, never deleted) + repos in **************** Hand DDL applied as kamo first (CONTRACT §1d + metadata_json, secret_expires_at, allow_idp_initiated, created/updated_by_member_id; jit_default_role_id is UUID like org_roles.id). NotificationKind IDP_CONNECTION_HEALTH and KamoOAuthRevokeReason MEMBER_DEPROVISIONED appended last (STRING, no CHECK).