History

tegwick 2de0f862f9 All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Successful in 1m15s Details FLEX-WP-0040-T07: compact-sitting v14 admits present-existing requester v14 (proposed, sha256:8911458f36f1a60598aa19592a2d752a74dffe2617fd86238407ac87bc300fde) keeps every v13 decision and admits approval requester service:nk-bind-executor only from submitter nk-bind-executor, memo class and approval action bounded-execution, an aal2 human reviewer, and never the approval actor itself (GH-DEC-2026-026 class C2). v13 stays unchanged as rollback reference. The admission generator skips present_existing registry rows. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 5502@bnt-lap001 Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196		2026-11-01 00:40:35 +01:00
..
application-readback	FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access	2026-10-09 20:10:50 +02:00
caring	Sign decision envelopes and close FLEX-WP-0024.	2026-09-14 09:57:50 +02:00
claims	Align IAM Profile consumption with v0.2	2026-05-22 14:35:30 +02:00
forgejo-application-access	Add producer-owned authenticated Go decision client and validated Forgejo profile	2026-10-18 01:20:05 +02:00
informed-decision-lifecycle	FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access	2026-10-09 20:10:50 +02:00
informed-decision-lifecycle-review	Admit named-recipient discovery for lifecycle reviews	2026-10-05 01:01:29 +02:00
informed-decision-present-existing-review	FLEX-WP-0040-T07: compact-sitting v14 admits present-existing requester	2026-11-01 00:40:35 +01:00
informed-decision-sitting	Admit review acts for the three T03 version-3 memos (v11).	2026-10-04 16:36:26 +02:00
informed-decision-t03	Pin IR-WP-0005-T02 review to memo version 3.	2026-09-27 15:29:25 +02:00
markitect	Make undeclared policy attribute reads a validate error.	2026-09-14 09:54:09 +02:00
ops-warden	FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry	2026-10-20 22:58:36 +02:00
ops-warden-fetch	FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020)	2026-10-10 13:26:19 +02:00
qonto-assistant	FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020)	2026-10-10 13:26:19 +02:00
railiance-platform	FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020)	2026-10-10 13:26:19 +02:00
secrets-engine	Prepare signed lifecycle runtime admission and receipt verification	2026-10-16 10:48:28 +02:00
secrets-engine-service-task-execution	Prepare closed service task execution input and policy contract	2026-10-11 19:48:53 +02:00
secrets-engine-service-task-execution-v2	Bind trusted task approval to exact producer facts and lifetime	2026-10-16 17:27:30 +02:00
secrets-engine-task-execution	Add proposed task execution policy and initiating identity contract	2026-10-11 19:06:01 +02:00
tenant-engine	FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020)	2026-10-10 13:26:19 +02:00
topaz	Implement Topaz adapter	2026-05-17 06:58:04 +02:00
user-engine	FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020)	2026-10-10 13:26:19 +02:00
README.md	FLEX-WP-0006: implement ops-warden signing gate policy	2026-06-23 21:17:42 +02:00

README.md

examples/

Runnable examples used both as documentation and as test fixtures.

Expected layout (filled in across FLEX-WP-0002 / FLEX-WP-0003 / FLEX-WP-0005):

examples/
  claims/                  # key-cape lightweight-mode and Keycloak heavy-mode
                           # claim envelopes (P5.5)
  caring/                  # executable CARING descriptor, request,
                           # decision, registry, and audit fixtures (P2.1)
  markitect/               # FlexAuthResourceManifest fixtures, decision
                           # fixtures, and Rego-in-Markdown policy packages
  ops-warden/              # SSH certificate signing policy-gate fixtures
                           # for ops-warden policy.enabled smoke checks
  topaz/                   # docker-compose + sample directory and policy
                           # for the Topaz alignment spike (P5.4)
  policies/                # generic Rego-in-Markdown packages used by
                           # the standalone core tests