coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
access-engine/schemas
History
tegwick 8f2ba75e4a
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 58s
Details
FLEX-WP-0035 T01-T03: application access readback pin 
Contract accepted by user-engine; FLEX-DEC-2026-019 accepted.
- serve-readback: dedicated pin, no enforcement routes, own caller binding
- CheckRequest.purpose hashed into every digest when set; /v1/check refuses it
- POST /v1/readback/application_access and GET /v1/readback/systems
- optional client_binding on protected systems; readback schemas
- schemaguard implements maxItems
- T05 added: informed-decision needs an application.access rule over
  realm-level claims (its lifecycle rules read authentication_audience)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 609675@bnt-lap001
Assistant-Session: 4987a36e-eb38-4b10-803c-15a29cd78212
2026-10-09 20:02:31 +02:00
..
action_authorization.schema.json Accept ActionAuthorization deferral; fix the state-hub authority constant 2026-09-06 01:30:04 +02:00
audit_event.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
caring_access_descriptor.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
caring_profile.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
check_request.schema.json Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
decision_envelope.schema.json FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
policy_fixture.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
policy_package.schema.json Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
protected_system_manifest.schema.json FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
readback_request.schema.json FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
readback_response.schema.json FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
readback_systems.schema.json FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
README.md Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
relationship_fact.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
resource_manifest.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
subject_manifest.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00

README.md

schemas/

JSON Schema definitions for flex-auth's canonical artefacts:

  • resource_manifest.schema.json (pinned in FLEX-WP-0005 P5.3)
  • protected_system_manifest.schema.json
  • subject_manifest.schema.json
  • relationship_fact.schema.json
  • caring_profile.schema.json
  • caring_access_descriptor.schema.json
  • policy_package.schema.json
  • policy_fixture.schema.json
  • check_request.schema.json
  • decision_envelope.schema.json — published decision-record contract (flex-auth.decision-record.v1; see docs/decision-record-contract.md)
  • action_authorization.schema.json
  • audit_event.schema.json

Schemas are pinned in FLEX-WP-0002 P2.1 and validated against Go types in pkg/api/.