tegwick
e9e9f93317
- Optional required_assurance {"level": aal1|aal2|aal3} at issue, schema v7.
Enforced at add_entry (403), claim (assurance_unsatisfied) and consume (409)
from the verified token level only; inherited on supersession; legacy rows
NULL. Served only when declared so undeclared claims keep exact bytes.
- deploy/networkpolicies.yaml: pod-scoped ingress for sso +
app.kubernetes.io/name=bounded-executor on 8080 (hub 39a3bffa). Not applied.
- docs/decision-services-alignment-answer.md: owner answer to the NetKingdom
decision services review (hub 81cafbf3): roles accepted, T02 split proposed,
presentation_ref at create declined with an entry-level counter-proposal.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
18 lines
490 B
TOML
18 lines
490 B
TOML
[project]
|
|
name = "approval-engine"
|
|
version = "0.1.0"
|
|
description = "PIP for the approval object: durable, authenticated, consumable, atomically supersedable."
|
|
readme = "README.md"
|
|
requires-python = ">=3.11"
|
|
dependencies = ["PyJWT[crypto]>=2.7,<3"]
|
|
|
|
[project.optional-dependencies]
|
|
dev = ["pytest", "jsonschema>=4,<5", "pyyaml>=6"]
|
|
serve = ["waitress>=3,<4"]
|
|
|
|
[project.scripts]
|
|
approval-engine = "approval_engine.cli:main"
|
|
|
|
[tool.pytest.ini_options]
|
|
testpaths = ["tests"]
|
|
pythonpath = ["."]
|