access-engine/docs
tegwick b5da745063
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Successful in 1m5s
FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access
- application.access allows only with purpose=readback and the authoring
  human bar; no workload path, no audience or client-scoped claims
- v1 operations unchanged; pin.json moves to v2; live pin stays v1 until T04
- examples/application-readback: readback catalogue with informed-decision's
  key-cape client binding; integration test over the shipped files

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 609675@bnt-lap001
Assistant-Session: 4987a36e-eb38-4b10-803c-15a29cd78212
2026-10-09 20:10:50 +02:00
..
adr Finish FLEX-WP-0015: both pins enforce, live A2 probes, AuthZEN deferred 2026-08-19 14:35:27 +02:00
conformance Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
contracts Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
evidence Pin lifecycle delivery to scanned commit-built policy image 2026-10-04 21:46:32 +02:00
action-bound-authorization-contract.md Accept ActionAuthorization deferral; fix the state-hub authority constant 2026-09-06 01:30:04 +02:00
application-access-readback.md FLEX-WP-0035-T05: informed-decision lifecycle v2 declares application.access 2026-10-09 20:10:50 +02:00
blocked-task-dependencies-2026-10-04.md Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
canonical-request-digest.md fix(decision): registry facts win over caller-supplied attributes 2026-09-07 13:43:33 +02:00
caring-architecture-blueprint.md Refine workplans for CARING profile 2026-05-17 04:15:38 +02:00
decision-emission-operations.md Implement local decision delivery and reconcile blocked workplan requirements 2026-10-04 11:40:37 +02:00
decision-envelope-signature.md Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
decision-input-freshness.md Answer ops-warden and secrets-engine; open FLEX-WP-0021 2026-09-06 01:12:50 +02:00
decision-record-contract.md Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
delegated-mode-operations.md Document delegated mode operations 2026-05-17 07:27:45 +02:00
directory-group-resolver-adapters.md Add directory group resolver adapters 2026-05-17 07:24:50 +02:00
flex-auth-authorization-registry-research.md Established INTENT.md 2026-05-04 17:52:29 +02:00
iam-profile-consumption.md Close B2 and finish FLEX-WP-0030; record tenant-engine's and key-cape's answers. 2026-09-21 22:57:56 +02:00
keycloak-authz-adapter-path.md Add Keycloak authorization adapter path 2026-05-17 07:18:45 +02:00
markitect-action-vocabulary.md Define Markitect action vocabulary 2026-05-17 06:26:13 +02:00
markitect-integration-flow.md Document Markitect integration flow 2026-05-17 06:41:07 +02:00
markitect-resource-namespace.md Define Markitect resource namespace 2026-05-17 06:14:04 +02:00
openrouter-native-access.md Resolve OpenRouter native contract and promote secrets-engine PDP 2026-09-14 00:54:56 +02:00
operator-caller-access-path.md Enforce verified secrets-engine operator caller identity 2026-09-06 23:38:36 +02:00
ops-warden-policy-gate-handoff.md Close ops-warden policy gate deployment 2026-06-30 00:52:56 +02:00
ops-warden-registry-sync.md FLEX-WP-0007: production registry fixture, tests, and sync runbook 2026-06-24 14:52:35 +02:00
pre-implementation-assessment.md Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
ProductRequirementsDocument.md feat(authz): bind decisions to exact actions 2026-08-23 13:18:26 +02:00
railiance-platform-action-vocabulary.md feat(policy): add credential grant authorization package 2026-08-23 13:59:03 +02:00
relationship-pdp-adapter-boundary.md Add relationship PDP adapter boundary 2026-05-17 07:06:14 +02:00
request-enrichment.md Admit the compact sitting review package on a dedicated pin. 2026-09-15 22:50:24 +02:00
rule-pdp-adapter-boundary.md Add rule PDP adapter boundary 2026-05-17 07:13:27 +02:00
secrets-engine-action-vocabulary.md Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
stance-register-review-second-edition.md Close FLEX-WP-0029 second edition; correct cadence.yaml; block human/external-gated workplans 2026-09-27 22:12:35 +02:00
stance-register-review.md Close FLEX-WP-0029 second edition; correct cadence.yaml; block human/external-gated workplans 2026-09-27 22:12:35 +02:00
tenancy-posture-review.md Record zone-engine compilation invariant; drop uncommitted policy leftovers 2026-08-19 21:36:22 +02:00
tenant-engine-action-vocabulary.md Authorize tenant-engine guardrail read and set actions 2026-08-16 02:46:25 +02:00
tenant-engine-resource-namespace.md Authorize tenant-engine guardrail read and set actions 2026-08-16 02:46:25 +02:00
topaz-adapter-operations.md Implement Topaz adapter 2026-05-17 06:58:04 +02:00
topaz-mapping-spike.md Topaz alignment spike — mapping doc + green e2e example 2026-05-16 09:04:42 +02:00
workplan-planning-map.md Enforce caller-auth on flex-auth-ops-warden (FLEX-WP-0016-T03) 2026-08-19 20:10:31 +02:00