A policy-as-code capable authorization registry/control-plane service.
Find a file
tegwick 2bc2137350
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 1m4s
Agent rules: hub repo slug and inbox are access-engine (FLEX-WP-0020); runtime names unchanged
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
2026-10-10 13:03:17 +02:00
.claude/rules Agent rules: hub repo slug and inbox are access-engine (FLEX-WP-0020); runtime names unchanged 2026-10-10 13:03:17 +02:00
.forgejo/workflows Publish images via CI; file staged-promotion overlay debt 2026-08-11 10:35:34 +02:00
.github/workflows Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
.repo-manager repo-manager index: regenerate for access-engine (slug, repo_root) 2026-09-30 19:45:14 +02:00
charts/flex-auth FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image 2026-10-10 12:38:43 +02:00
cmd/flex-auth FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image 2026-10-10 12:38:43 +02:00
decisions FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
deploy deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
docs FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access 2026-10-09 20:10:50 +02:00
examples FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access 2026-10-09 20:10:50 +02:00
history Align INTENT and SCOPE to security layer model v0.7; plan conformance work 2026-08-29 14:43:49 +02:00
intakes chore(registrar): assign State Hub identifiers 2026-08-29 02:45:11 +02:00
internal FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access 2026-10-09 20:10:50 +02:00
pkg/api FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
railiance deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
registry Add capability registry with seed entry from reuse-surface 2026-06-16 01:46:54 +02:00
schemas FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
tests Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
tools Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
values FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image 2026-10-10 12:38:43 +02:00
workplans FLEX-WP-0035: T05 done on founder agreement; T04 awaiting operator rollout 2026-10-10 12:39:32 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-09 20:12:38 +02:00
.gitignore Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.golangci.yml Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md FLEX-WP-0020-T08: source sync in fresh access-engine clone (repo slug) 2026-09-30 17:26:24 +02:00
cadence.yaml Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:37 +02:00
Containerfile Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
Containerfile.lifecycle Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
Containerfile.t03-review Admit T03 version-two reviews while preserving current sitting records 2026-09-16 01:08:56 +02:00
go.mod Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
go.sum Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
INTENT.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:16:31 +02:00
Makefile Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
README.md Prepare the access-engine repository coordinate without applying the rename. 2026-09-15 23:38:48 +02:00
SCOPE.md Close FLEX-WP-0029 second edition; correct cadence.yaml; block human/external-gated workplans 2026-09-27 22:12:35 +02:00
tenancy.yaml fix(posture): remove redundant implemented level 2026-08-22 15:22:33 +02:00
WORK-RECORDS.md FLEX-WP-0035: T05 waits on informed-decision; record readback pin URL and audience promised to user-engine 2026-10-10 10:27:22 +02:00

flex-auth

Policy-as-code authorization registry and control plane for NetKingdom-aligned systems.

The live Forge and State Hub coordinate is still flex-auth (repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df, Forge ID 42). FLEX-WP-0020 will rename that coordinate to access-engine and keep the Go module, binary, FLEX_AUTH_* variables, Helm releases, container package coulomb/flex-auth, and policy/API vocabulary unchanged. Work-record frontmatter stays repo: flex-auth until State Hub rebind. Planned clone: https://forgejo.coulomb.social/coulomb/access-engine.git.

Start with INTENT.md for the project boundary and direction. Research notes and ADRs live in docs/ and docs/adr/.

The product boundary is captured in SCOPE.md, and the current Product Requirements Document is docs/ProductRequirementsDocument.md.

The 2026-05-15 pre-implementation assessment that shapes the current sequencing is in docs/pre-implementation-assessment.md.

The CARING reference-implementation approach is captured in docs/caring-architecture-blueprint.md.

Workplans live in workplans/, with sequencing captured in docs/workplan-planning-map.md.