coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
A policy-as-code capable authorization registry/control-plane service.
416 commits 2 branches 0 tags 5.6 MiB
Find a file
tegwick 22185e94ec Withhold uncommitted decision effects and pin accepted layer canon 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 02:21:40 +02:00
.claude/rules Agent rules: hub repo slug and inbox are access-engine (FLEX-WP-0020); runtime names unchanged 2026-10-10 13:03:17 +02:00
.forgejo/workflows Publish images via CI; file staged-promotion overlay debt 2026-08-11 10:35:34 +02:00
.github/workflows FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
.repo-manager repo-manager index: regenerate for access-engine (slug, repo_root) 2026-09-30 19:45:14 +02:00
charts/flex-auth FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image 2026-10-10 12:38:43 +02:00
cmd Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
decisions FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
deploy deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
docs FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
examples FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
history Align INTENT and SCOPE to security layer model v0.7; plan conformance work 2026-08-29 14:43:49 +02:00
intakes chore(registrar): assign State Hub identifiers 2026-08-29 02:45:11 +02:00
internal Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
pkg/api Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
railiance deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
registry Add capability registry with seed entry from reuse-surface 2026-06-16 01:46:54 +02:00
schemas FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
tests Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
tools Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
values FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image 2026-10-10 12:38:43 +02:00
workplans Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-10 20:14:08 +02:00
.gitignore Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.golangci.yml FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md FLEX-WP-0020-T08: source sync in fresh access-engine clone (repo slug) 2026-09-30 17:26:24 +02:00
cadence.yaml Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:37 +02:00
Containerfile FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
Containerfile.lifecycle Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
Containerfile.t03-review Admit T03 version-two reviews while preserving current sitting records 2026-09-16 01:08:56 +02:00
go.mod FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
go.sum Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
INTENT.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:16:31 +02:00
Makefile FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
README.md FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
SCOPE.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
tenancy.yaml FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
WORK-RECORDS.md FLEX-WP-0036-T01: runtime-name decision is FLEX-DEC-2026-021 (020 went to the binary) 2026-10-10 13:29:21 +02:00

README.md

access-engine

Policy-as-code authorization registry and control plane for NetKingdom-aligned systems.

The Forge and State Hub coordinate is access-engine (FLEX-WP-0020; repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df, Forge ID 42; hub alias flex-auth). The binary is access-engine (FLEX-DEC-2026-020; flex-auth is now only a stub that prints the rename), and the Go module is github.com/netkingdom/access-engine. The runtime still uses flex-auth: the namespace, Helm releases, Services, caller audience and container package coulomb/flex-auth. FLEX-WP-0036 moves those to new pins that run alongside the old ones while consumers switch. Clone: https://forgejo.coulomb.social/coulomb/access-engine.git.

Start with INTENT.md for the project boundary and direction. Research notes and ADRs live in docs/ and docs/adr/.

The product boundary is captured in SCOPE.md, and the current Product Requirements Document is docs/ProductRequirementsDocument.md.

The 2026-05-15 pre-implementation assessment that shapes the current sequencing is in docs/pre-implementation-assessment.md.

The CARING reference-implementation approach is captured in docs/caring-architecture-blueprint.md.

Workplans live in workplans/, with sequencing captured in docs/workplan-planning-map.md.