- realms
- auth profiles
- backend profiles
- bindings
auth_binding
- switch providers without changing its overall structure
- run different mob members under different tenants/accounts
- use env-var fallback for fast paths and explicit bindings for controlled paths
Mental model
What this concept owns
- binding identity
- credential resolution path
- per-session / per-turn / per-member provider identity choice
What it does not own
- the general model catalog (
Providers) - session lifecycle (
Sessions) - config write/CAS mechanics (
Configuration)
