access-engine/cmd/flex-auth
tegwick b5da745063
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Successful in 1m5s
FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access
- application.access allows only with purpose=readback and the authoring
  human bar; no workload path, no audience or client-scoped claims
- v1 operations unchanged; pin.json moves to v2; live pin stays v1 until T04
- examples/application-readback: readback catalogue with informed-decision's
  key-cape client binding; integration test over the shipped files

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 609675@bnt-lap001
Assistant-Session: 4987a36e-eb38-4b10-803c-15a29cd78212
2026-10-09 20:10:50 +02:00
..
testdata/readback FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
main.go FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
main_test.go Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
ops_warden_fetch_test.go access-engine: secret-read evaluator for warden fetch checks (CUST-WP-0075) 2026-10-03 08:57:11 +02:00
readback.go FLEX-WP-0035 T01-T03: application access readback pin 2026-10-09 20:02:31 +02:00
readback_test.go FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access 2026-10-09 20:10:50 +02:00