FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory

- module path renamed (no external importers); golangci local-prefixes
- ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION replaces FLEX_AUTH_RUN_TOPAZ_INTEGRATION
- README title and identity paragraph reflect the landed renames
- docs/runtime-rename-inventory.md: per-consumer references by kind and order
- chart name, image package and /opt paths deliberately left for T05

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc

internal/adapters/directory/enrichment.go

@@ -3,7 +3,7 @@ package directory
 import (
 	"sort"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // MergeResults combines resolver results while keeping source metadata.

internal/adapters/directory/resolvers.go

@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"time"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // GraphClient is the Microsoft Graph group lookup boundary.

internal/adapters/directory/resolvers_test.go

@@ -5,8 +5,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/directory"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/directory"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestGraphResolverDetectsTokenOverage(t *testing.T) {

internal/adapters/directory/types.go

@@ -4,7 +4,7 @@ import (
 	"context"
 	"time"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Source identifies the external directory source.

internal/adapters/keycloak/adapter.go

@@ -7,7 +7,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter maps flex-auth checks and resources to Keycloak Authorization

internal/adapters/keycloak/adapter_test.go

@@ -5,8 +5,8 @@ import (
 	"errors"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/keycloak"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/keycloak"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestBuildAuthorizationRequestUsesUMAPermissionShape(t *testing.T) {

internal/adapters/keycloak/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/relationship/adapter.go

@@ -8,8 +8,8 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter wraps tuple-oriented PDP results into flex-auth decision envelopes.

internal/adapters/relationship/adapter_test.go

@@ -6,9 +6,9 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/relationship"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/relationship"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestSnapshotToTuplesMapsCanonicalRegistry(t *testing.T) {

internal/adapters/relationship/translate.go

@@ -5,8 +5,8 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // SnapshotToTuples maps flex-auth registry data to relationship tuples.

internal/adapters/relationship/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/rule/adapter.go

@@ -8,8 +8,8 @@ import (
 	"fmt"
 	"reflect"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter wraps rule-PDP responses into flex-auth decision envelopes.

internal/adapters/rule/adapter_test.go

@@ -6,9 +6,9 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/rule"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/rule"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestCanonicalInputFromCheck(t *testing.T) {

internal/adapters/rule/policy_artifact.go

@@ -1,8 +1,8 @@
 package rule
 
 import (
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // PolicyArtifactFromPackage preserves the extracted Rego module and metadata

internal/adapters/rule/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (

internal/adapters/topaz/adapter.go

@@ -8,9 +8,9 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // Adapter delegates checks, directory writes, and policy bundle publication to

internal/adapters/topaz/adapter_test.go

@@ -7,10 +7,10 @@ import (
 	"path/filepath"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/topaz"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/adapters/topaz"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestSnapshotToDirectoryMapsCanonicalRegistry(t *testing.T) {

internal/adapters/topaz/http_client_test.go

@@ -7,7 +7,7 @@ import (
 	"net/http/httptest"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/adapters/topaz"
+	"github.com/netkingdom/access-engine/internal/adapters/topaz"
 )
 
 func TestHTTPClientUsesTopazDirectoryRESTShape(t *testing.T) {

internal/adapters/topaz/integration_test.go

@@ -8,8 +8,11 @@ import (
 )
 
 func TestTopazDockerComposeExample(t *testing.T) {
-	if os.Getenv("FLEX_AUTH_RUN_TOPAZ_INTEGRATION") != "1" {
-		t.Skip("set FLEX_AUTH_RUN_TOPAZ_INTEGRATION=1 to run the examples/topaz docker-compose integration")
+	if os.Getenv("FLEX_AUTH_RUN_TOPAZ_INTEGRATION") == "1" {
+		t.Skip("FLEX_AUTH_RUN_TOPAZ_INTEGRATION was renamed: set ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION=1 (FLEX-WP-0036)")
+	}
+	if os.Getenv("ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION") != "1" {
+		t.Skip("set ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION=1 to run the examples/topaz docker-compose integration")
 	}
 
 	dir := filepath.Join("..", "..", "..", "examples", "topaz")

internal/adapters/topaz/policy_bundle.go

@@ -8,7 +8,7 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/policy"
+	"github.com/netkingdom/access-engine/internal/policy"
 )
 
 // PolicyBundleFromPackage extracts the Rego module from a flex-auth

internal/adapters/topaz/translate.go

@@ -5,8 +5,8 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // SnapshotToDirectory converts flex-auth's canonical registry snapshot into

internal/adapters/topaz/types.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 const (