# access-engine

Policy-as-code authorization registry and control plane for NetKingdom-aligned
systems.

The Forge and State Hub coordinate is `access-engine` (`FLEX-WP-0020`;
repository UUID `fda8ad85-a7d7-4055-8f21-902a533e59df`, Forge ID `42`; hub alias
`flex-auth`). The binary is `access-engine` (`FLEX-DEC-2026-020`; `flex-auth`
is now only a stub that prints the rename), and the Go module is
`github.com/netkingdom/access-engine`. The runtime still uses `flex-auth`: the
namespace, Helm releases, Services, caller audience and container package
`coulomb/flex-auth`. `FLEX-WP-0036` moves those to new pins that run alongside
the old ones while consumers switch. Clone:
`https://forgejo.coulomb.social/coulomb/access-engine.git`.

Start with [INTENT.md](INTENT.md) for the project boundary and direction.
Research notes and ADRs live in [docs/](docs/) and [docs/adr/](docs/adr/).

The product boundary is captured in [SCOPE.md](SCOPE.md), and the current
Product Requirements Document is
[docs/ProductRequirementsDocument.md](docs/ProductRequirementsDocument.md).

The 2026-05-15 pre-implementation assessment that shapes the current
sequencing is in
[docs/pre-implementation-assessment.md](docs/pre-implementation-assessment.md).

The CARING reference-implementation approach is captured in
[docs/caring-architecture-blueprint.md](docs/caring-architecture-blueprint.md).

Workplans live in [workplans/](workplans/), with sequencing captured in
[docs/workplan-planning-map.md](docs/workplan-planning-map.md).