access-engine/cmd/access-engine
tegwick 9132f9b677
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Successful in 57s
FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry
Add agt-custodian (WARDEN-WP-0045) to examples/ops-warden/production_registry_snapshot.json
so flex-auth-ops-warden stops refusing it with unknown_actor_resource (CUST-WP-0073-T02).
Additions only; regenerated-inventory drift (agt-rehearsal, adm/codex zone fields) not taken.
Tests cover own-principal proceed and foreign-principal disallowed_principal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 22:58:36 +02:00
..
testdata/readback FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
envelope_signing.go fix(auth): sign served decisions before recording and returning them 2026-10-16 07:51:43 +02:00
envelope_signing_test.go fix(auth): sign served decisions before recording and returning them 2026-10-16 07:51:43 +02:00
forgejo_application_profile_test.go Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
main.go Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
main_test.go FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry 2026-10-20 22:58:36 +02:00
ops_warden_fetch_test.go FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
outbox_capacity_test.go Bound durable outbox storage and enforce process writer exclusion 2026-10-16 18:43:52 +02:00
readback.go FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
readback_pin_test.go Prepare renamed Access Engine runtime twins with exact reviewer scope 2026-10-11 22:53:54 +02:00
readback_test.go Withhold uncommitted decision effects and pin accepted layer canon 2026-10-11 02:21:40 +02:00
runtime_rename_test.go Accept both PDP token audiences while preserving caller bindings 2026-10-11 21:30:47 +02:00
service_pilot_http_test.go Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
trusted_service_http_test.go Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00