coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
A policy-as-code capable authorization registry/control-plane service.
445 commits 2 branches 0 tags 5.6 MiB
Find a file
tegwick 4f6946bbb3
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Failing after 1m1s
Details
Bind service task HTTP input to authenticated caller before evaluation 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 16:25:55 +02:00
.claude/rules Agent rules: hub repo slug and inbox are access-engine (FLEX-WP-0020); runtime names unchanged 2026-10-10 13:03:17 +02:00
.forgejo/workflows Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
.github/workflows FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
.repo-manager repo-manager index: regenerate for access-engine (slug, repo_root) 2026-09-30 19:45:14 +02:00
charts Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
cmd Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
decisions Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
deploy Prepare renamed Access Engine runtime twins with exact reviewer scope 2026-10-11 22:53:54 +02:00
docs Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
examples Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
history Align INTENT and SCOPE to security layer model v0.7; plan conformance work 2026-08-29 14:43:49 +02:00
intakes Retain synchronized work-record index and intake binding 2026-10-11 18:37:44 +02:00
internal Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
pkg/api Publish reviewed exact task execution PDP binding contract 2026-10-11 15:03:03 +02:00
railiance deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
registry docs(reuse): establish reviewed NetKingdom security capabilities 2026-10-14 06:37:38 +02:00
schemas FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
tests Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
tools Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
values Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
workplans Bind service task HTTP input to authenticated caller before evaluation 2026-10-16 16:25:55 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-10-11 20:38:15 +02:00
.gitignore Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.golangci.yml FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md FLEX-WP-0020-T08: source sync in fresh access-engine clone (repo slug) 2026-09-30 17:26:24 +02:00
cadence.yaml Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:37 +02:00
Containerfile Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
Containerfile.lifecycle Complete renamed image source and verify bounded consumer migration readiness 2026-10-11 23:25:19 +02:00
Containerfile.t03-review Admit T03 version-two reviews while preserving current sitting records 2026-09-16 01:08:56 +02:00
go.mod FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
go.sum Admit initial decision lifecycle audience and patch evaluator dependencies 2026-10-04 21:40:39 +02:00
INTENT.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:16:31 +02:00
Makefile FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
README.md FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory 2026-10-10 15:29:00 +02:00
SCOPE.md FLEX-WP-0036: binary renamed to access-engine; flex-auth is a stub naming the rename (FLEX-DEC-2026-020) 2026-10-10 13:26:19 +02:00
tenancy.yaml Prepare signed lifecycle runtime admission and receipt verification 2026-10-16 10:48:28 +02:00
WORK-RECORDS.md Sync work-record index after requalification 2026-10-11 20:50:24 +02:00

README.md

access-engine

Policy-as-code authorization registry and control plane for NetKingdom-aligned systems.

The Forge and State Hub coordinate is access-engine (FLEX-WP-0020; repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df, Forge ID 42; hub alias flex-auth). The binary is access-engine (FLEX-DEC-2026-020; flex-auth is now only a stub that prints the rename), and the Go module is github.com/netkingdom/access-engine. The runtime still uses flex-auth: the namespace, Helm releases, Services, caller audience and container package coulomb/flex-auth. FLEX-WP-0036 moves those to new pins that run alongside the old ones while consumers switch. Clone: https://forgejo.coulomb.social/coulomb/access-engine.git.

Start with INTENT.md for the project boundary and direction. Research notes and ADRs live in docs/ and docs/adr/.

The product boundary is captured in SCOPE.md, and the current Product Requirements Document is docs/ProductRequirementsDocument.md.

The 2026-05-15 pre-implementation assessment that shapes the current sequencing is in docs/pre-implementation-assessment.md.

The CARING reference-implementation approach is captured in docs/caring-architecture-blueprint.md.

Workplans live in workplans/, with sequencing captured in docs/workplan-planning-map.md.