Identity enrollment & cert‑based auth
macOS enrollment app + backend issuing client certificates; OIDC bridge for web; policy‑driven access.
- • Local keypair generation • Secure import to keychains
- • Verification + liveness + scoring
- • CI/CD, monitoring, incident playbooks