coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FLEX-WP-0035: activate; draft application access readback contract and FLEX-DEC-2026-019
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 609675@bnt-lap001
Assistant-Session: 4987a36e-eb38-4b10-803c-15a29cd78212
This commit is contained in:
tegwick 2026-10-09 19:11:55 +02:00
parent 229a98c527
commit 9d9ca69b4c
4 changed files with 228 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

17
workplans/FLEX-WP-0035-per-identity-application-readback.md
View file

@ -4,12 +4,13 @@ type: workplan
title: "Per-identity application access readback and readable protected-system registry for user-engine"
domain: infotech
repo: access-engine
status: proposed
status: active
owner: claude
topic_slug: netkingdom
created: "2026-10-09"
updated: "2026-10-09"
related: [USER-WP-0026, USER-WP-0028]
state_hub_workstream_id: "cb9755fa-6824-5288-81c4-3aa2fbff1a9f"
---
user-engine (message `f1637c32`, 2026-10-09, routed by net-kingdom `19a0cbcd`)
@ -38,8 +39,9 @@ record.
```task
id: FLEX-WP-0035-T01
status: todo
status: progress
priority: high
state_hub_task_id: "0585a684-d462-5caa-937f-b1730efddbd8"
```
Decide the action that a readback evaluates per system: a declared
@ -54,6 +56,14 @@ a PEP decision by another system.
Gate: written contract in `docs/` plus an ADR or decision record; reviewed with
user-engine before code.
2026-10-09: activated by the founder. Draft contract
`docs/application-access-readback.md` and `FLEX-DEC-2026-019` (proposed). Key
finding: each pin loads one consumer's package, so no existing pin can answer
across applications. The draft proposes a dedicated readback pin with
multi-package mode, a `purpose: "readback"` binding that keeps decisions
non-transferable, and a new optional `client_binding` manifest field. Sent to
user-engine with four review questions. The gate closes on their reply.
## Caller authorization for cross-system readback
```task
@ -61,6 +71,7 @@ id: FLEX-WP-0035-T02
status: todo
priority: high
depends_on: [FLEX-WP-0035-T01]
state_hub_task_id: "eb0b6a91-7750-553b-b87f-c4262eb9df07"
```
Add a distinct caller capability (readback scope) instead of widening the
@ -78,6 +89,7 @@ id: FLEX-WP-0035-T03
status: todo
priority: medium
depends_on: [FLEX-WP-0035-T01]
state_hub_task_id: "5dbb3280-8490-58a5-a0bb-f3883e568f58"
```
Serve a read-only projection: system id, display name, key-cape client binding.
@ -96,6 +108,7 @@ needs_human: true
depends_on: [FLEX-WP-0035-T02, FLEX-WP-0035-T03]
blocking_reason: "Live pin change on railiance01 needs founder go."
priority: medium
state_hub_task_id: "82a8a7e6-54e9-5262-a271-24ce2f161362"
```
Roll the readback route and its caller binding onto `flex-auth-user-engine`,