Contributor Documentation

This section is for developers changing Keystone-NG itself.

• Local development covers prerequisites and complete local environments.
• Testing lists the supported unit, integration, Raft, and live API test workflows.
• API development explains crate ownership, handler and policy conventions, and OpenAPI generation.
• Authentication plugin development documents the WASM plugin interface.
• Security model is the normative reference for changes to authentication, authorization, delegation, tokens, credentials, and policy input.
• Security architecture review records additional threat analysis and proposed gates.
• Architecture Decision Records contain accepted and proposed design decisions.

Read CONTRIBUTING.md before submitting a change.