{
  "id": "topic:krate-agent-role-binding",
  "_kind": "Topic",
  "_file": "domain/products/krate-agent-layer.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Krate Agent Role Binding",
    "description": "RBAC RoleBinding scoped to agent operations within Krate. Defines\nwhich Kubernetes roles an agent assumes, limiting its access to\nnamespaces, resource types, and API verbs. Role bindings enforce\nleast-privilege for agent operations — an agent fixing a CI pipeline\ngets different permissions than one reviewing code.\n"
  },
  "outgoingEdges": [
    {
      "from": "topic:krate-agent-role-binding",
      "to": "domain:platform-engineering",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-role-binding",
      "to": "domain:devops",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-role-binding",
      "to": "skill-area:k8s-rbac",
      "kind": "applies_to"
    },
    {
      "from": "topic:krate-agent-role-binding",
      "to": "topic:krate-agent-service-account",
      "kind": "requires",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "topic:krate-agent-service-account",
      "to": "topic:krate-agent-role-binding",
      "kind": "related_to",
      "attributes": {}
    }
  ]
}