FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 6s
Build and Publish Container Image / build-and-push (push) Successful in 1m23s

- module path renamed (no external importers); golangci local-prefixes
- ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION replaces FLEX_AUTH_RUN_TOPAZ_INTEGRATION
- README title and identity paragraph reflect the landed renames
- docs/runtime-rename-inventory.md: per-consumer references by kind and order
- chart name, image package and /opt paths deliberately left for T05

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
This commit is contained in:
tegwick 2026-10-10 15:29:00 +02:00
parent 94a4fd15e0
commit f758381cea
71 changed files with 272 additions and 146 deletions

View file

@ -86,7 +86,7 @@ names in the table still need the founder's acceptance.
```task
id: FLEX-WP-0036-T02
status: todo
status: progress
priority: high
depends_on: [FLEX-WP-0036-T01]
state_hub_task_id: "8f597899-677e-544b-ad58-26aab2614312"
@ -105,6 +105,12 @@ from each owner.
Gate: `docs/runtime-rename-inventory.md` with one row per reference and an
owner handoff id per consumer.
2026-10-10 inventory written. Handoff ids are not yet requested. They wait for
T01, so each owner gets the exact new URL and audience in one message. Found
that informed-decision's component tests and ops-warden's production smoke
script run a binary whose path comes from an env var. A binary built from
current source must now come from `./cmd/access-engine`.
## Make the PDP accept both names
```task
@ -145,9 +151,16 @@ both resolve to the same digest.
now `cmd/access-engine` and the image entrypoint is
`/usr/local/bin/access-engine`. The image also ships the `flex-auth` stub.
Updated: Makefile, CI, `tools/verify-posture.sh`, `tenancy.yaml` and the live
docs. Workplans, decisions and ADRs are left as written. Still to do: the Go
module, `FLEX_AUTH_*` env vars, the chart, the image package and the
`/opt/flex-auth` paths.
docs. Workplans, decisions and ADRs are left as written.
2026-10-10 also done: Go module `github.com/netkingdom/access-engine`; no other
repo imports it. `ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION` replaces the only
`FLEX_AUTH_*` variable, and the old name skips the test with a message naming
the new one. README identity paragraph and title updated. Still to do, and
deliberately left for T05: the chart name, because it changes selector labels,
which are immutable on a `helm upgrade`, so it ships with the new releases.
Also the image package and the `/opt/flex-auth` paths, which every live pin's
args reference.
## Stand up the access-engine namespace next to flex-auth