FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory

- module path renamed (no external importers); golangci local-prefixes
- ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION replaces FLEX_AUTH_RUN_TOPAZ_INTEGRATION
- README title and identity paragraph reflect the landed renames
- docs/runtime-rename-inventory.md: per-consumer references by kind and order
- chart name, image package and /opt paths deliberately left for T05

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc

internal/adapters/directory/enrichment.go

@@ -3,7 +3,7 @@ package directory
 import (
 	"sort"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // MergeResults combines resolver results while keeping source metadata.

internal/adapters/directory/resolvers.go

@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"time"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // GraphClient is the Microsoft Graph group lookup boundary.

internal/adapters/directory/resolvers_test.go

@@ -5,8 +5,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/directory"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/directory"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestGraphResolverDetectsTokenOverage(t *testing.T) {

internal/adapters/directory/types.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"time"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Source identifies the external directory source.

internal/adapters/keycloak/adapter.go

@@ -7,7 +7,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter maps flex-auth checks and resources to Keycloak Authorization

internal/adapters/keycloak/adapter_test.go

@@ -5,8 +5,8 @@ import (
 	"errors"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/keycloak"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/keycloak"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestBuildAuthorizationRequestUsesUMAPermissionShape(t *testing.T) {

internal/adapters/keycloak/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/relationship/adapter.go

@@ -8,8 +8,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter wraps tuple-oriented PDP results into flex-auth decision envelopes.

internal/adapters/relationship/adapter_test.go

@@ -6,9 +6,9 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/relationship"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/relationship"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestSnapshotToTuplesMapsCanonicalRegistry(t *testing.T) {

internal/adapters/relationship/translate.go

@@ -5,8 +5,8 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // SnapshotToTuples maps flex-auth registry data to relationship tuples.

internal/adapters/relationship/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/rule/adapter.go

@@ -8,8 +8,8 @@ import (
 	"fmt"
 	"reflect"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter wraps rule-PDP responses into flex-auth decision envelopes.

internal/adapters/rule/adapter_test.go

@@ -6,9 +6,9 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/rule"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/rule"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestCanonicalInputFromCheck(t *testing.T) {

internal/adapters/rule/policy_artifact.go

@@ -1,8 +1,8 @@
 package rule
 
 import (
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // PolicyArtifactFromPackage preserves the extracted Rego module and metadata

internal/adapters/rule/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/topaz/adapter.go

@@ -8,9 +8,9 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter delegates checks, directory writes, and policy bundle publication to

internal/adapters/topaz/adapter_test.go

@@ -7,10 +7,10 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/topaz"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/topaz"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestSnapshotToDirectoryMapsCanonicalRegistry(t *testing.T) {

internal/adapters/topaz/http_client_test.go

@@ -7,7 +7,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/topaz"
+	"github.com/netkingdom/access-engine/internal/adapters/topaz"
 )
 
 func TestHTTPClientUsesTopazDirectoryRESTShape(t *testing.T) {

internal/adapters/topaz/integration_test.go

@@ -8,8 +8,11 @@ import (
 )
 
 func TestTopazDockerComposeExample(t *testing.T) {
-	if os.Getenv("FLEX_AUTH_RUN_TOPAZ_INTEGRATION") != "1" {
-		t.Skip("set FLEX_AUTH_RUN_TOPAZ_INTEGRATION=1 to run the examples/topaz docker-compose integration")
+	if os.Getenv("FLEX_AUTH_RUN_TOPAZ_INTEGRATION") == "1" {
+		t.Skip("FLEX_AUTH_RUN_TOPAZ_INTEGRATION was renamed: set ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION=1 (FLEX-WP-0036)")
+	}
+	if os.Getenv("ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION") != "1" {
+		t.Skip("set ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION=1 to run the examples/topaz docker-compose integration")
 	}
 
 	dir := filepath.Join("..", "..", "..", "examples", "topaz")

internal/adapters/topaz/policy_bundle.go

@@ -8,7 +8,7 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
+	"github.com/netkingdom/access-engine/internal/policy"
 )
 
 // PolicyBundleFromPackage extracts the Rego module from a flex-auth

internal/adapters/topaz/translate.go

@@ -5,8 +5,8 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // SnapshotToDirectory converts flex-auth's canonical registry snapshot into

internal/adapters/topaz/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/audit/log.go

@@ -8,7 +8,7 @@ import (
 	"path/filepath"
 	"sync"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // JSONLDecisionLog persists compact decision envelopes for local development.

internal/audit/log_test.go

@@ -4,8 +4,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/audit"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/audit"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestJSONLDecisionLogRoundTripsDecisions(t *testing.T) {

internal/decision/attribute_context_test.go

@@ -6,10 +6,10 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/decision"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/decision"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestAttributeContextCarriedWithoutViewHash(t *testing.T) {

internal/decision/emission_atomicity_test.go

@@ -5,8 +5,8 @@ import (
 	"errors"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/decision"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/decision"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // failingRecorder is an outbox whose commit always fails.

internal/decision/engine.go

@@ -15,10 +15,10 @@ import (
 	"sync"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Engine evaluates deterministic standalone authorization checks against a

internal/decision/engine_test.go

@@ -10,12 +10,12 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/audit"
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/internal/decision"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/audit"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/internal/decision"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestCheckUsesExplicitCaringContext(t *testing.T) {

internal/decision/enrichment_precedence_test.go

@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // A registry fact is an authority statement; the same key on the request is the

internal/emission/delivery_test.go

@@ -11,8 +11,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/emission"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/emission"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestHeartbeatScheduleSurvivesRestart(t *testing.T) {

internal/emission/outbox.go

@@ -16,7 +16,7 @@ import (
 	"sync"
 	"time"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // ClassPrefix prefixes every decision event class; the suffix is the effect.

internal/emission/outbox_test.go

@@ -9,8 +9,8 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/emission"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/emission"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func deny(id, tenant string) api.DecisionEnvelope {

internal/layer/conformance_test.go

@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/layer"
+	"github.com/netkingdom/access-engine/internal/layer"
 	"gopkg.in/yaml.v3"
 )
 

internal/layer/survey_test.go

@@ -6,7 +6,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/layer"
+	"github.com/netkingdom/access-engine/internal/layer"
 )
 
 func writeRepo(t *testing.T, root, name, intent, declFile string) {

internal/markitect/actions.go

@@ -1,6 +1,6 @@
 package markitect
 
-import "github.com/netkingdom/flex-auth/pkg/api"
+import "github.com/netkingdom/access-engine/pkg/api"
 
 const (
 	ActionRead            = "read"

internal/markitect/actions_test.go

@@ -4,8 +4,8 @@ import (
 	"slices"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/markitect"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/markitect"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestActionVocabularySeparatesReadFromExport(t *testing.T) {

internal/markitect/check_fixtures_test.go

@@ -5,8 +5,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestMarkitectCheckFixturePackageValidates(t *testing.T) {

internal/markitect/decision.go

@@ -1,6 +1,6 @@
 package markitect
 
-import "github.com/netkingdom/flex-auth/pkg/api"
+import "github.com/netkingdom/access-engine/pkg/api"
 
 const (
 	GatewayEffectAllow       = "allow"

internal/markitect/decision_test.go

@@ -3,8 +3,8 @@ package markitect_test
 import (
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/markitect"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/markitect"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestGatewayDecisionAllowContract(t *testing.T) {

internal/markitect/importer.go

@@ -4,8 +4,8 @@ import (
 	"fmt"
 	"slices"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/markitect/importer_test.go

@@ -7,9 +7,9 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/markitect"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/markitect"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestImportResourceManifestLoadsPinnedMarkitectShape(t *testing.T) {

internal/policy/attribute_reads.go

@@ -19,8 +19,8 @@ import (
 const undeclaredAttributeCode = "POLICY-ATTRIBUTE-UNDECLARED"
 
 var (
-	attrDot = regexp.MustCompile(`input\.(resource|subject)\.attributes\.([A-Za-z_][A-Za-z0-9_]*)`)
-	attrGet = regexp.MustCompile(`object\.get\(\s*input\.(resource|subject)\.attributes\s*,\s*"([A-Za-z_][A-Za-z0-9_]*)"`)
+	attrDot       = regexp.MustCompile(`input\.(resource|subject)\.attributes\.([A-Za-z_][A-Za-z0-9_]*)`)
+	attrGet       = regexp.MustCompile(`object\.get\(\s*input\.(resource|subject)\.attributes\s*,\s*"([A-Za-z_][A-Za-z0-9_]*)"`)
 	attrNestedGet = regexp.MustCompile(`object\.get\(\s*object\.get\(\s*input\.(resource|subject)\s*,\s*"attributes"\s*,\s*\{\}\s*\)\s*,\s*"([A-Za-z_][A-Za-z0-9_]*)"`)
 )
 

internal/policy/informed_decision_attribute_test.go

@@ -11,8 +11,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestInformedDecisionAttributeAdmission(t *testing.T) {

internal/policy/informed_decision_lifecycle_test.go

@@ -8,8 +8,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestInformedDecisionLifecycle(t *testing.T) {

internal/policy/informed_decision_t03_act_test.go

@@ -7,8 +7,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // v11 allows review acts on the three list-only T03 records at memo version 3.

internal/policy/informed_decision_wp0094_test.go

@@ -7,8 +7,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // v10 admits exactly the four STATE-WP-0094 sitting memos. Pins come from

internal/policy/package.go

@@ -14,7 +14,7 @@ import (
 	"github.com/open-policy-agent/opa/rego"
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Diagnostic is a validation message emitted while loading or evaluating a

internal/policy/package_test.go

@@ -10,8 +10,8 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestLoadPolicyPackageMarkdownValidates(t *testing.T) {

internal/readback/readback.go

@@ -14,10 +14,10 @@ import (
 	"slices"
 	"strings"
 
-	decisioncore "github.com/netkingdom/flex-auth/internal/decision"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	decisioncore "github.com/netkingdom/access-engine/internal/decision"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // ApplicationAccess is the only action the readback evaluates. A package takes

internal/registry/manifest_test.go

@@ -7,7 +7,7 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestRegistryManifestsParse(t *testing.T) {

internal/registry/store.go

@@ -7,7 +7,7 @@ import (
 	"path/filepath"
 	"sort"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Store is a deterministic local registry for standalone development and tests.

internal/registry/store_test.go

@@ -6,8 +6,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestStoreImportsManifests(t *testing.T) {

internal/sign/sign.go

@@ -9,7 +9,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const AlgorithmEd25519 = "ed25519"

internal/sign/sign_test.go

@@ -7,8 +7,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/sign"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/sign"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // testdataSeed is a well-known non-production key. It exists so fixtures can

internal/sign/write_fixtures_test.go

@@ -6,8 +6,8 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/sign"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/sign"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestWriteReplaySignatureFixtures(t *testing.T) {