coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
A policy-as-code capable authorization registry/control-plane service.
466 commits 2 branches 0 tags 5.6 MiB
Find a file
tegwick 36465de299 Wave-2 right-sizing: flex-auth requests 145m/288Mi -> 45m/204Mi across 9 releases (FLEX-WP-0038) 
Chart default request 25m/32Mi -> 5m/20Mi (user-engine, tenant-engine,
ops-warden, ops-warden-fetch, secrets-engine); overrides keep 5m CPU with memory
by 7d p95 x1.15: application-readback 24Mi, informed-decision-lifecycle 24Mi,
informed-decision-sitting 40Mi (p95 35Mi, up from 32Mi), informed-decision-t03 16Mi.
Limits unchanged.
Evidence: resource-control 2026-10-21 node budget (3d9b1bd).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 276069@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
2026-10-22 00:08:03 +02:00
.claude/rules Agent rules: hub repo slug and inbox are access-engine (FLEX-WP-0020); runtime names unchanged 2026-10-10 13:03:17 +02:00
.forgejo/workflows Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00
.github/workflows FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
.repo-manager repo-manager index: regenerate for access-engine (slug, repo_root) 2026-09-30 19:45:14 +02:00
adapters/go/decisionpep Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
charts Wave-2 right-sizing: flex-auth requests 145m/288Mi -> 45m/204Mi across 9 releases (FLEX-WP-0038) 2026-10-22 00:08:03 +02:00
cmd FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry 2026-10-20 22:58:36 +02:00
decisions Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
deploy FLEX-WP-0037: pin flex-auth-ops-warden to main-9132f9b (agt-custodian registry) 2026-10-20 23:03:48 +02:00
docs FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate 2026-10-21 01:22:46 +02:00
examples FLEX-WP-0037: register ops-warden actor agt-custodian in the production registry 2026-10-20 22:58:36 +02:00
history Align INTENT and SCOPE to security layer model v0.7; plan conformance work 2026-08-29 14:43:49 +02:00
intakes Retain synchronized work-record index and intake binding 2026-10-11 18:37:44 +02:00
internal Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
pkg Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
railiance deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
registry Declare the flex-auth secrets-engine release unit. 2026-10-21 22:23:46 +02:00
schemas FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
tests FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate 2026-10-21 01:22:46 +02:00
testsupport/signfixture Add producer-owned authenticated Go decision client and validated Forgejo profile 2026-10-18 01:20:05 +02:00
third_party/approvalfact Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00
tools FLEX-WP-0024: CCR-2026-0050 Access review, signer public receipt and T07 founder gate 2026-10-21 01:22:46 +02:00
values Wave-2 right-sizing: flex-auth requests 145m/288Mi -> 45m/204Mi across 9 releases (FLEX-WP-0038) 2026-10-22 00:08:03 +02:00
workplans chore(consistency): write back State Hub ids 2026-10-21 12:29:11 +02:00
.generated-work-records.json build: adopt staged records and retain reviewed orientation snapshot 2026-10-19 13:30:56 +02:00
.generated-work-records.mk build: adopt staged records and retain reviewed orientation snapshot 2026-10-19 13:30:56 +02:00
.gitignore build: keep generated orientation brief local and untracked 2026-10-19 13:44:05 +02:00
.golangci.yml FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md FLEX-WP-0020-T08: source sync in fresh access-engine clone (repo slug) 2026-09-30 17:26:24 +02:00
cadence.yaml Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:37 +02:00
Containerfile Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00
Containerfile.lifecycle Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
Containerfile.t03-review Admit T03 version-two reviews while preserving current sitting records 2026-09-16 01:08:56 +02:00
go.mod Bind trusted task approval to exact producer facts and lifetime 2026-10-16 17:27:30 +02:00
go.sum Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
INTENT.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:16:31 +02:00
Makefile build: adopt staged records and retain reviewed orientation snapshot 2026-10-19 13:30:56 +02:00
README.md FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
SCOPE.md SCOPE: record FLEX-WP-0037 agt-custodian registry rollout (revision 3) 2026-10-21 00:04:43 +02:00
tenancy.yaml Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
WORK-RECORDS.md FLEX-WP-0038: receiving record for wave-2 flex-auth right-sizing (CUST-WP-0071) 2026-10-21 09:02:55 +02:00

README.md

access-engine

Policy-as-code authorization registry and control plane for NetKingdom-aligned systems.

The Forge and State Hub coordinate is access-engine (FLEX-WP-0020; repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df, Forge ID 42; hub alias flex-auth). The binary is access-engine (FLEX-DEC-2026-020; flex-auth is now only a stub that prints the rename), and the Go module is github.com/netkingdom/access-engine. The runtime still uses flex-auth: the namespace, Helm releases, Services, caller audience and container package coulomb/flex-auth. FLEX-WP-0036 moves those to new pins that run alongside the old ones while consumers switch. Clone: https://forgejo.coulomb.social/coulomb/access-engine.git.

Start with INTENT.md for the project boundary and direction. Research notes and ADRs live in docs/ and docs/adr/.

The product boundary is captured in SCOPE.md, and the current Product Requirements Document is docs/ProductRequirementsDocument.md.

The 2026-05-15 pre-implementation assessment that shapes the current sequencing is in docs/pre-implementation-assessment.md.

The CARING reference-implementation approach is captured in docs/caring-architecture-blueprint.md.

Workplans live in workplans/, with sequencing captured in docs/workplan-planning-map.md.