generated: '2026-09-19'
method: searched
source: https://governance.taskhawktech.com/.well-known/oauth-authorization-server (RFC 8414 metadata, fetched 2026-09-19;
  saved as well-known/taskhawktech-com-oauth-authorization-server.json)
docs: null
note: The OpenAPI declares ONLY an apiKey scheme (X-API-Key), so derive-oauth-scopes.py found nothing to derive.
  These scopes come from the provider's published authorization-server metadata. No scopes reference page exists;
  descriptions below are limited to what the scope name plus the matching REST operation make evident, and are marked
  accordingly. The scopes are NOT referenced by any operation's security requirement in the contract.
authorization_server:
  issuer: https://governance.taskhawktech.com
  authorization_endpoint: https://governance.taskhawktech.com/oauth/authorize
  token_endpoint: https://governance.taskhawktech.com/oauth/token
  jwks_uri: https://governance.taskhawktech.com/.well-known/jwks.json
  grant_types:
  - authorization_code
  - client_credentials
  - urn:ietf:params:oauth:grant-type:jwt-bearer
  response_types:
  - code
  - token
  token_endpoint_auth_methods:
  - client_secret_post
  signing_alg:
  - ES256
scopes:
- name: governance:verify
  description: Action verification — matches operation verify-action (POST /governance/verify).
  operations:
  - verify-action
  confidence: medium (name match; not bound in the OpenAPI)
- name: governance:attest
  description: Provenance attestation — matches attest-action (POST /governance/attest).
  operations:
  - attest-action
  confidence: medium
- name: governance:bind
  description: Intent binding — matches bind-intent (POST /governance/bind).
  operations:
  - bind-intent
  confidence: medium
- name: governance:entitlements
  description: null
  operations: []
  confidence: low — no public operation; likely plan/entitlement lookup
- name: governance:scim
  description: null
  operations: []
  confidence: low — implies a SCIM provisioning surface; no /scim path is published or probed
- name: governance:logout
  description: null
  operations: []
  confidence: low
- name: governance:gtr
  description: null
  operations: []
  confidence: low — acronym not expanded anywhere public
scope_count: 7