SPIFFE / SPIRE · process identity

Same user. Different identity.

The caller process makes the request. Money authenticates its SVID, then checks its permission.

Assumed demo operator · no human login

Fake ledger

Loading verified balances…

Fixed transfer: USD 1.00 (100 minor units), demo-a → demo-b. Money restart resets balances and retry history.

Registered executable

Trusted caller

Expected: spiffe://poc.internal/caller/trusted

No attempt yet.

Unregistered executable · same UID

Unidentified caller

Expected: no eligible SVID. The probe still verifies Money before testing client-certificate rejection.

No attempt yet.

Repeating or interrupting an attempt keeps its browser key. Use “New logical attempt” only after the previous outcome is resolved. Caller evidence is distinct from Money's HTTP result; a timeout is not identity rejection. UI balances use spiffe://poc.internal/ui, which cannot transfer.