Vision and scope
Mint is a long-lived internal OMP primitive.
Its product goal is deterministic confidentiality and containment.
Direction
Section titled “Direction”Mint should disappear from the operator's normal workflow.
Every installed and used launcher should perform credentialed work without manual secret handling.
New launcher or provider drift should fail closed.
Direct credential paths should fail after cutover.
Every completion claim should have fresh Mint and vendor-side evidence.
These outcomes describe direction.
They do not claim that every local path is already migrated.
In scope
Section titled “In scope”Mint owns the use boundary for credentialed effects.
That boundary includes:
- custody adapters and internal secret resolution;
- workload authentication to Mint;
- alias, destination, protocol, and injection binding;
- non-disclosing proxying or effect execution;
- response scrubbing;
- fail-closed auditing;
- revocation and rotation plumbing;
- adoption evidence and direct-path detection.
Out of scope
Section titled “Out of scope”Mint does not own semantic authority governance.
It does not decide whether an action is appropriate.
It does not own agent permissions, delegation, or task scope.
It does not own human approvals or operator escalation.
It does not own spend policy, cost budgets, or business-risk decisions.
It does not decide when a task should run.
Those decisions belong to an external authority system, execution plane, or operator.
Execution boundary
Section titled “Execution boundary”The HTTP egress credential proxy is the default mode.
A typed effect or protocol gateway needs a discovered local OMP path.
That path must not preserve raw credential access.
Protocol categories alone are not roadmap commitments.
A child that needs a raw credential is unsupported until a stronger boundary exists.
Product primitives
Section titled “Product primitives”Mint's primitives are CredentialAlias, ContainmentRule, WorkloadIdentity, Placeholder, and AuditEvent.
Connectors and typed effects are implementation choices.
Budget, Approval, and semantic Permission are not Mint primitives.