{ "product": "Lucion Identity", "version": "6.6.6", "release": "General Availability", "authentication_foundation_operational": true, "enrollment_foundation_operational": true, "product_completeness_gate_operational": true, "verification_ux_operational": true, "v1_readiness_gate_operational": true, "v1_rehearsal_gate_operational": true, "production_authentication_available": true, "production_oauth_available": true, "production_scim_available": true, "production_lyra_delegation_available": true, "production_launch_requires_explicit_environment_approval": true, "database_binding_required": "DB", "passkey_verification": "production-capable", "passkey_authentication": "production-capable", "password_authentication": "production-capable-independent-sign-in", "server_authoritative_identity_surfaces": "production-console-without-client-persisted-identity-state", "email_verification_delivery": "resend", "session_issuer": "production-capable", "session_storage": "hash-only-server-side", "session_cookie": "secure-http-only", "csrf_protection": "double-submit-separate-cookie", "step_up_verification": "production-capable", "recovery": "email-proof-plus-replacement-passkey", "oauth_oidc": "authorization-code-pkce-signed-id-tokens", "mcp_server": "remote-streamable-http-resource-bound-oauth-pkce", "mcp_connection_setup_reliability": "strict-resource-errors-explain-canonical-url-and-required-refresh-scope", "assistant_api_key_creation": "explicit-request-only-read-only-scopes-short-lived-hash-only-one-time-display", "developer_credentials": "server-side-hash-only-secrets", "confidential_oidc_client_lifecycle": "owner-scoped-edit-delete-step-up-and-idempotent-secret-rotation-one-time-display-hash-only-storage", "client_secret_persistence": "sha256-verifier-only-with-fixed-non-secret-type-marker-and-no-secret-derived-prefix", "organization_authorization": "server-side", "lyra_authorization_evaluation": "delegated-scoped-policy-bound", "scim": "bearer-token-provisioning-lifecycle", "federation": "inbound-oidc-capability-contract-saml-protocol-gated", "status": "general-availability", "route_status_integrity": "unknown-html-paths-return-404-with-route-specific-noindex-canonical", "favicon": "/favicon.ico", "apple_touch_icon": "/apple-touch-icon.png", "logo": "/assets/identity-brand/lucion-identity-horizontal.png", "developer_key_action_ux": "signed-out-actions-route-to-sign-in-and-empty-scope-submits-are-blocked-client-side", "client_network_resilience": "bounded-timeout-safe-classification-retryable-reads-no-automatic-mutation-retries", "accessibility_semantics": "skip-navigation-current-navigation-pressed-section-state-keyboard-menu-flow", "dialog_focus_management": "credential-dialog-focus-trap-escape-close-and-trigger-restoration", "response_security_headers": "csp-plus-framing-cross-domain-policy-and-origin-agent-cluster-defense-in-depth", "form_error_semantics": "associated-validation-feedback-with-assertive-and-polite-live-regions", "live_verification_reliability": "bounded-network-checks-and-deterministic-success-or-failure-exit", "status_page_network_resilience": "authoritative-status-reads-use-bounded-safe-request-classification", "authentication_network_resilience": "auth-capability-and-sign-in-requests-use-bounded-safe-transport", "capability_surface_network_resilience": "public-and-account-capability-surfaces-use-bounded-safe-transport", "browser_request_boundary": "production-ui-modules-use-one-bounded-safe-request-helper", "capability_retry_affordances": "bounded-capability-failures-have-accessible-read-only-retry-controls", "bounded_response_boundary": "browser-api-responses-are-capped-before-json-parsing-with-safe-classification", "request_correlation_boundary": "validated-server-request-ids-are-available-as-non-auth-diagnostic-metadata", "reduced_motion_hardening": "reduced-motion-removes-nonessential-animation-transition-delay-and-control-translation", "route_scoped_critical_preloading": "homepage-hero-preload-is-removed-from-authenticated-and-documentation-shells", "repository_security_evidence": "secret-safe-source-scan-and-reproducible-sbom-review", "performance_budget_evidence": "/performance-evidence.json", "synthetic_live_monitor": "credential-free-readiness-rehearsal-route-probe", "release_evidence": "/release-evidence.json", "rollback_verification": "previous-pages-artifact-health-rehearsal-nonce-check", "source_syntax_evidence": "node-check-experimental-strip-types-and-python-compile", "accessibility_evidence": "/accessibility-evidence.json", "tenant_isolation_evidence": "/tenant-isolation-evidence.json", "authenticated_journey_evidence": "/authenticated-journey-evidence.json", "security_headers_evidence": "live-headers-verified-by-verify-live", "response_policy_evidence": "live-no-store-json-policy-verified-by-verify-live", "resend_provider_response_boundary": "bounded-131072-byte-json-before-parse-safe-classification", "resend_diagnostic_boundary": "allowlisted-status-classification-before-persistence-response-and-log", "trust_ux_pattern_suite_operational": true, "resend_webhook_verification": "configurable", "auth_email_from": "Lucion Identity ", "resend_webhook_endpoint": "/api/webhooks/resend", "api_reference": "/api/openapi.json", "outbound_webhooks": "signed-events-with-rotation-and-test-delivery", "webhook_secret_storage": "hash-only-lookup-plus-aes-gcm-encrypted-server-copy", "api_idempotency": "atomic-hash-only-resource-and-webhook-test-replay-protection", "webhook_delivery": "durable-outbox-with-bounded-retry-and-owner-scoped-inspection", "developer_list_pagination": "bounded-opaque-cursor-pagination", "webhook_rotation_idempotency": "hash-only-one-time-secret-replay-protection", "session_revocation_webhooks": "tenant-scoped-outbox-backed-lifecycle-events", "profile_update_api": "scoped-idempotent-bearer-profile-mutations-with-audit-events", "webhook_tenant_routing": "internal-audience-filtered-delivery", "scim_user_lifecycle": "organization-scoped-create-read-update-patch-deprovision", "scim_user_mapping": "organization-scoped-external-id-and-resource-state", "scim_create_idempotency": "token-scoped-hash-only-atomic-completion", "openapi_route_parity": "runtime-surface-public-json-backend-yaml", "resend_webhook_metadata": "bounded-provider-identifiers-safe-unknown-events", "webhook_redirect_policy": "redirect-error-fail-closed", "destructive_mutation_idempotency": "hash-only-owner-scoped-api-key-revoke-and-webhook-disable", "audit_activity_api": "owner-scoped-metadata-free-cursor-paginated-audit-and-security-events", "documentation_rendering": "scim-path-parameters-render-as-literal-text", "organization_management": "server-backed-tenant-bound-management-api", "organization_approval_workflows": "step-up-admin-separation-of-duties-atomic-audit-idempotent-records", "organization_application_assignments": "server-backed-organization-application-assignments", "organization_member_lifecycle": "server-backed-role-status-and-removal-with-owner-protection", "organization_group_membership": "server-backed-tenant-bound-group-membership", "organization_group_lifecycle": "idempotent-rename-and-empty-group-deletion", "organization_group_sdks": "typescript-python-go-read-only-bearer-contract", "organization_bearer_reads": "tenant-bound-scoped-organization-members-groups-domains-and-lyra-reads", "organization_bearer_pagination": "bounded-opaque-cursor-pages-with-tenant-bound-stable-ordering", "organization_admin_console": "server-backed-role-application-assignment-and-scoped-delegated-admin-controls-with-step-up-csrf-and-idempotency", "organization_delegated_admin_console": "server-backed-owner-created-active-member-targeted-time-limited-scope-bound-grants-with-revocation", "organization_mutation_idempotency": "hash-only-replay-safe-role-and-application-assignment-mutations", "organization_policy_controls": "server-enforced-policy-upsert-and-reset-controls-with-idempotency", "organization_federation_lifecycle": "replay-safe-activate-disable-and-disabled-delete-controls-with-independent-protocol-gate", "organization_sso": "inbound-oidc-verified-domain-pkce-signed-token-tenant-bound-jit", "organization_membership_reads": "session-and-bearer-self-scoped-d1-memberships", "lyra_advisory_responses": "groq-server-only-explicit-lyra-chat-delegation-no-action-execution", "federation_provider_preflight": "read-only-tenant-bound-safe-classification-without-provider-body", "organization_audit_pagination": "bounded-opaque-cursor-pagination-with-metadata-free-tenant-filtering", "organization_approval_console": "server-backed-step-up-separation-of-duties-approval-controls", "organization_sdk_mutations": "typescript-python-go-tenant-bound-idempotent-organization-mutation-helpers", "organization_sdk_inspection": "typescript-python-go-runtime-and-tenant-bound-organization-read-helpers", "api_versioning": "v1-current-scim-2.0-current-with-documented-deprecation-policy", "live_status_evidence": "status-page-reads-capabilities-readiness-and-rehearsal-with-no-store-no-credentials", "release_truthfulness_ui": "current-and-previous-release-history-validated", "organization_domain_verification": "dns-txt-proof-hash-only-with-replay-safe-lifecycle", "organization_domain_lifecycle": "replay-safe-create-and-delete-with-active-federation-protection", "organization_conditional_access": "passkey-step-up-session-age-session-binding-sensitive-reads-and-scoped-delegated-admin-enforced", "organization_delegated_administration": "owner-created-active-member-targeted-time-limited-scope-bound-replay-safe-revocable", "enterprise_federation_discovery": "verified-domain-active-connection-only-with-provider-status", "sdk_contract_types": "generated-from-public-openapi", "privacy_export": "scoped-server-backed-no-secrets", "privacy_deletion_requests": "step-up-csrf-idempotent-manual-review-only", "webhook_verification_helpers": "typescript-python-go-raw-body-hmac-five-minute-window", "server_integration_quickstart": "node-server-scoped-profile-api-no-store-bounded-timeout", "server_response_boundary": "unreadable-upstream-response-fails-closed", "rate_limit_headers": "ratelimit-limit-remaining-reset-plus-retry-after-on-authentication-throttles", "operational_evidence": "documented-with-manual-backup-restore-rollback-and-assurance-actions", "scim_group_lifecycle": "organization-scoped-idempotent-create-update-delete-group-push", "scim_group_sdk_lifecycle": "typescript-python-go-keyed-group-lifecycle-helpers", "scim_concurrency": "opaque-etag-meta-version-conditional-reads-and-if-match-stale-write-protection", "scim_user_sdk_lifecycle": "typescript-python-go-keyed-user-lifecycle-and-discovery-helpers", "developer_api_read_surface": "scoped-bearer-owner-filtered-metadata-only-opaque-cursor-reads", "developer_quickstart": "version-aligned-copy-paste-server-side-profile-and-developer-read-examples", "typed_developer_webhook_contract": "typed-owner-scoped-metadata-only-collection-responses-with-safe-examples", "developer_credential_step_up_ux": "interactive-production-passkey-or-password-step-up-with-idempotent-retry", "developer_session_gate": "server-session-confirmed-actions-with-sign-in-guidance", "developer_application_deletion": "owner-scoped-step-up-idempotent-audited-soft-delete-with-linked-credential-revocation", "password_authentication_contract": "verified-email-account-creation-server-pepper-bound-salted-pbkdf2-rate-limited-lockout", "password_step_up": "authenticated-password-reauthentication-short-lived-session-marker-no-session-issuance", "oidc_signing_key": "server-side-rs256-jwks", "v1_schema_migration": "0014_organization_management.sql", "v5_schema_migration": "0015_v5_action_boundary.sql", "v5_0_1_schema_migration": "0016_v5_organization_lifecycle.sql", "v5_action_boundary": "schema-validated-confirmed-idempotent-accepted-not-executed", "enterprise_federation": "provider-level-oidc-enabled-saml-metadata-validated-before-activation-protocol-gated", "sdk_surfaces": [ "typescript", "python", "go", "request-id-rate-limit-error-metadata" ], "cli_surface": "safe-federation-inspection-plus-confirmed-scoped-mutations", "trust_center": "/trust", "capability_matrix": "/api/v1/capabilities", "release_train": "x.y.9-to-x.(y+1).0-and-x.9.0-to-(x+1).0.0", "v5_0_2_schema_migration": null, "v5_0_3_schema_migration": null, "v5_0_4_schema_migration": null, "v5_0_5_schema_migration": null, "v5_0_6_schema_migration": null, "v5_0_7_schema_migration": null, "v5_0_8_schema_migration": null, "v5_0_9_schema_migration": null, "v5_1_0_schema_migration": "0017_privacy_deletion_requests.sql", "v5_1_1_schema_migration": null, "v5_1_6_schema_migration": "0018_oidc_federation_transactions.sql", "v5_3_4_schema_migration": "0019_organization_admin_delegations.sql", "v5_3_6_schema_migration": null, "v5_3_7_schema_migration": null, "v5_3_8_schema_migration": null, "v5_3_9_schema_migration": null, "v5_4_0_schema_migration": null, "v5_4_1_schema_migration": null, "v5_4_2_schema_migration": null, "v5_4_9_schema_migration": "0020_password_authentication.sql", "v5_5_0_schema_migration": null, "v5_5_7_schema_migration": "0021_lyra_chat_scope.sql", "mcp_oauth_resource_binding": "authorization-codes-access-and-refresh-tokens-bound-to-mcp-resource", "current_schema_migration": "0028_first_party_integrations.sql", "public_organization_app_sign_in": "public-oidc-login-with-tenant-bound-organization-scopes", "integration_certification_enforcement": "signed-ed25519-review-decisions-audit-only-until-issuer-and-resource-servers-are-configured", "integration_resource_scope_lookup": "protected-client-trust-supports-exact-product-bound-scope-decisions", "name": "Developer Application Deletion", "date": "October 15, 2026", "confidential_app_email_allowlist": true, "first_party_integrations": "staff-allowlisted-lucion-helios-only-read-only-organization-bound-key-bootstrap-disabled-without-allowlist" }