Trust domain ambient.local · issuer https://spiffe-demo.ambientsecurity.co
This host issues SPIFFE SVIDs and publishes the OIDC metadata that identity providers (e.g. Microsoft Entra) fetch to validate JWT-SVIDs. Endpoints:
The SVIDs themselves are issued over the SPIFFE Workload API (a local unix socket), not over HTTP.