coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
access-engine/docs
History
tegwick 2de0f862f9
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m15s
Details
FLEX-WP-0040-T07: compact-sitting v14 admits present-existing requester 
v14 (proposed, sha256:8911458f36f1a60598aa19592a2d752a74dffe2617fd86238407ac87bc300fde)
keeps every v13 decision and admits approval requester service:nk-bind-executor
only from submitter nk-bind-executor, memo class and approval action
bounded-execution, an aal2 human reviewer, and never the approval actor
itself (GH-DEC-2026-026 class C2). v13 stays unchanged as rollback reference.
The admission generator skips present_existing registry rows.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-11-01 00:40:35 +01:00
..
adr Finish FLEX-WP-0015: both pins enforce, live A2 probes, AuthZEN deferred 2026-08-19 14:35:27 +02:00
conformance Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
contracts Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
coordination Clarify catalogue owner obligations and retain ordinary admission response 2026-10-11 04:19:10 +02:00
evidence Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
reviews Retain independent task plan and canonical digest technical reviews 2026-10-11 19:35:51 +02:00
action-bound-authorization-contract.md Accept ActionAuthorization deferral; fix the state-hub authority constant 2026-09-06 01:30:04 +02:00
application-access-readback.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
audit-delivery-native-proof-packet.md Prepare reviewed audit delivery chart and native acceptance packet 2026-10-11 18:35:20 +02:00
audit-delivery-rollout-preparation.md Prepare reviewed audit delivery chart and native acceptance packet 2026-10-11 18:35:20 +02:00
blocked-task-dependencies-2026-10-04.md Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
bounded-execution-admission-pdp.md NK-WP-0056-T02 owner answer: PDP gate for bounded execution; FLEX-WP-0040 proposed 2026-10-31 14:19:08 +01:00
canonical-request-digest.md fix(decision): registry facts win over caller-supplied attributes 2026-09-07 13:43:33 +02:00
caring-architecture-blueprint.md Refine workplans for CARING profile 2026-05-17 04:15:38 +02:00
compact-sitting-v14-present-existing.md FLEX-WP-0040-T07: compact-sitting v14 admits present-existing requester 2026-11-01 00:40:35 +01:00
decision-emission-operations.md Bound durable outbox storage and enforce process writer exclusion 2026-10-16 18:43:52 +02:00
decision-envelope-signature.md FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate 2026-10-21 01:22:46 +02:00
decision-input-freshness.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
decision-record-contract.md Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
decisionpep-adapter.md Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
delegated-mode-operations.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
directory-group-resolver-adapters.md Add directory group resolver adapters 2026-05-17 07:24:50 +02:00
flex-auth-authorization-registry-research.md Established INTENT.md 2026-05-04 17:52:29 +02:00
iam-profile-consumption.md Close B2 and finish FLEX-WP-0030; record tenant-engine's and key-cape's answers. 2026-09-21 22:57:56 +02:00
keycloak-authz-adapter-path.md Add Keycloak authorization adapter path 2026-05-17 07:18:45 +02:00
markitect-action-vocabulary.md Define Markitect action vocabulary 2026-05-17 06:26:13 +02:00
markitect-integration-flow.md Document Markitect integration flow 2026-05-17 06:41:07 +02:00
markitect-resource-namespace.md Define Markitect resource namespace 2026-05-17 06:14:04 +02:00
native-signer-public-pin.json FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate 2026-10-21 01:22:46 +02:00
native-signer-workload.json Verify image publication without Python and bind local managed package 2026-10-16 19:52:09 +02:00
openrouter-native-access.md Resolve OpenRouter native contract and promote secrets-engine PDP 2026-09-14 00:54:56 +02:00
operator-caller-access-path.md Enforce verified secrets-engine operator caller identity 2026-09-06 23:38:36 +02:00
ops-warden-policy-gate-handoff.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
ops-warden-registry-sync.md FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry 2026-10-20 22:58:36 +02:00
pre-implementation-assessment.md Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
ProductRequirementsDocument.md feat(authz): bind decisions to exact actions 2026-08-23 13:18:26 +02:00
railiance-platform-action-vocabulary.md feat(policy): add credential grant authorization package 2026-08-23 13:59:03 +02:00
relationship-pdp-adapter-boundary.md Add relationship PDP adapter boundary 2026-05-17 07:06:14 +02:00
request-enrichment.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
rule-pdp-adapter-boundary.md Add rule PDP adapter boundary 2026-05-17 07:13:27 +02:00
runtime-rename-inventory.md Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
secrets-engine-action-vocabulary.md Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
service-task-execution-contract.md Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
stance-register-review-second-edition.md Close FLEX-WP-0029 second edition; correct cadence.yaml; block human/external-gated workplans 2026-09-27 22:12:35 +02:00
stance-register-review.md Close FLEX-WP-0029 second edition; correct cadence.yaml; block human/external-gated workplans 2026-09-27 22:12:35 +02:00
task-execution-initiating-provider-contract.md Add proposed task execution policy and initiating identity contract 2026-10-11 19:06:01 +02:00
task-execution-pdp-consumer-contract.md Publish reviewed exact task execution PDP binding contract 2026-10-11 15:03:03 +02:00
tenancy-posture-review.md Record zone-engine compilation invariant; drop uncommitted policy leftovers 2026-08-19 21:36:22 +02:00
tenant-engine-action-vocabulary.md Authorize tenant-engine guardrail read and set actions 2026-08-16 02:46:25 +02:00
tenant-engine-resource-namespace.md Authorize tenant-engine guardrail read and set actions 2026-08-16 02:46:25 +02:00
topaz-adapter-operations.md FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
topaz-mapping-spike.md Topaz alignment spike — mapping doc + green e2e example 2026-05-16 09:04:42 +02:00
trusted-service-task-source.md Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00
workplan-planning-map.md Enforce caller-auth on flex-auth-ops-warden (FLEX-WP-0016-T03) 2026-08-19 20:10:31 +02:00