"use strict";
// ExternalIdentityReference — bind an existing IdP identity to our passport.
// Locked Architectural Invariant 9 (Thomas directive 2026-05-06 evening, late).
//
// Purpose: customers with existing Okta / SailPoint / AWS IAM / Azure AD /
// OIDC / SAML / X.509 / custom identity systems must NOT have to abandon,
// migrate, or re-issue identity to participate in the trust network. The
// external identity is bound INSIDE our passport as a first-class claim.
//
// Verified at register-time (additive); never required at runtime
// (Invariant 2: platform never depends on external IdP availability).
Object.defineProperty(exports, "__esModule", { value: true });
//# sourceMappingURL=external-identity-reference.js.map