27 lines
1 KiB
Markdown
27 lines
1 KiB
Markdown
|
# Handoff for `access-engine` / `FLEX-WP-0017`
|
||
|
|
|
||
|
|
`FLEX-WP-0017` T03 waited on a durable object that was not the State Hub
|
||
|
|
`/decisions/{uuid}` shape. That object is this engine.
|
||
|
|
|
||
|
|
## What exists
|
||
|
|
|
||
|
|
- Claim contract: [`approval-claim.md`](approval-claim.md)
|
||
|
|
- Introspection: `GET /v1/approvals/{id}/claim`
|
||
|
|
- Object: `POST /v1/approvals`, entries, revoke, supersede
|
||
|
|
- Native `binding.digest` plus optional `binding.pdp_digest` for
|
||
|
|
`NewDecisionBinding.request_digest`
|
||
|
|
|
||
|
|
T03 is unblocked on the **object**, not on a hub substitute. Validate the
|
||
|
|
claim before privileged production actions. Fail closed if this engine is
|
||
|
|
unreachable.
|
||
|
|
|
||
|
|
## What does not exist yet
|
||
|
|
|
||
|
|
Consumption ordering (`GH-WP-0002-T06` / `APPROVAL-WP-0001-T05`). There is
|
||
|
|
no public `consume`. `FLEX-WP-0017` T05 stays blocked **only** on that
|
||
|
|
contract, not on a missing object or a missing digest.
|
||
|
|
|
||
|
|
Canon T-06 against this implementation: `tests/test_t06_replay.py` (wrong
|
||
|
|
target, wrong action, later time, revoked, superseded). Consume-side replay
|
||
|
|
is out of scope until T05.
|