coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add producer-owned authenticated Go decision client and validated Forgejo profile
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m22s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7
This commit is contained in:
tegwick 2026-10-18 01:20:05 +02:00
parent d328a26010
commit ca0cb75729
24 changed files with 2980 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

24
workplans/FLEX-WP-0024-decision-envelope-authenticity.md
View file

@ -15,7 +15,7 @@ related_workplans:
- FLEX-WP-0019
- FLEX-WP-0023
created: "2026-09-06"
updated: "2026-10-16"
updated: "2026-10-18"
state_hub_workstream_id: "90577acd-6910-548d-a13e-1dbfdfb8ed27"
---
@ -343,3 +343,25 @@ stays progress: actual founder entity/expiry/window/executor and five final
external scope dispositions, custody/trust/caller, actual stopped Helm revision,
PVC/PV Retain and native producer/consumer/restart/failure receipts remain open.
No live mutation, credential access, new key, authority or protected effect follows.
2026-10-18 source implementation under CUST-WP-0080 / NK-WP-0048-T43:
the producer-owned normal Check client now authenticates exact policy/registry/
caller/request/lifetime bindings with a nonce and the optional lossless JSON
profile. The default legacy decoder and unchanged signature/API contract remain
intact. Root pkg/decisionpep is the source of truth; its Go1.24 consumer slice is
generated by tools/export_decisionpep_adapter.py and checked by ordinary tests.
The Forgejo example uses authoritative registry tenant/issuer facts and verified
runtime identity in the admitted caller's request context. Actual producer
regressions reproduce/refuse object-shaped group inputs; policy fixtures and
Rego tests validate the original three-group contract. Full isolated root race
suite: 494 test/subtest passes, three existing optional/fixture skips. Export
parity and final group-shape regressions pass. Detailed source pins and retained
failures are in Custodian apps-access-engine-integration-r2.
This is source delivery, not owner assent or native admission. Synthetic keys,
registry and local callback proof establish no live signer/caller/policy grant.
Existing rollout R2/image84 and their approvals remain frozen; they do not admit
this source or a new image. T06 and all native custody/trust/rollout/recovery gates
remain open. Forgejo's complete resource/operation/inverse and session-revocation
coverage remains NK48-T43 / RAPPS16-T09 work.