{
  "id": "topic:kradle-agent-secret-grant",
  "_kind": "Topic",
  "_file": "domain/products/kradle-agent-layer.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Kradle Agent Secret Grant",
    "description": "Explicit secret access grant for an agent. Rather than giving agents\nbroad secret access via RBAC, Kradle requires per-secret grants that\nname the specific K8s Secret and keys the agent may read. Grants\nare audited and can be time-bounded, expiring after a configurable\nTTL.\n"
  },
  "outgoingEdges": [
    {
      "from": "topic:kradle-agent-secret-grant",
      "to": "domain:platform-engineering",
      "kind": "applies_to"
    },
    {
      "from": "topic:kradle-agent-secret-grant",
      "to": "domain:devops",
      "kind": "applies_to"
    },
    {
      "from": "topic:kradle-agent-secret-grant",
      "to": "skill-area:container-security",
      "kind": "applies_to"
    },
    {
      "from": "topic:kradle-agent-secret-grant",
      "to": "topic:kradle-agent-service-account",
      "kind": "requires",
      "attributes": {}
    },
    {
      "from": "topic:kradle-agent-secret-grant",
      "to": "topic:kradle-agent-config-grant",
      "kind": "related_to",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "topic:kradle-agent-service-account",
      "to": "topic:kradle-agent-secret-grant",
      "kind": "related_to",
      "attributes": {}
    },
    {
      "from": "topic:kradle-agent-config-grant",
      "to": "topic:kradle-agent-secret-grant",
      "kind": "related_to",
      "attributes": {}
    }
  ]
}