Complete flex-auth PEP and document railiance packaging path

Local + HTTP POST /v1/check PEP with fail-closed transport errors;
shell:view enforced on /app/. Vocabulary docs for T07. Helm chart lives
in railiance-apps; Dockerfile already present for T08.
This commit is contained in:
tegwick 2026-08-09 02:00:12 +02:00
parent 0e973a91aa
commit 44439f8d8d
8 changed files with 273 additions and 20 deletions

View file

@ -110,8 +110,9 @@ USER_ENGINE_EXPECTED_AUDIENCE = config(
"USER_ENGINE_EXPECTED_AUDIENCE", default="user-engine-portal"
)
# flex-auth (empty → local fail-closed stub for sensitive checks; shell view allowed)
# flex-auth (empty → local vocabulary; URL set → POST /v1/check fail-closed)
FLEX_AUTH_BASE_URL = config("FLEX_AUTH_BASE_URL", default="")
FLEX_AUTH_PROTECTED_SYSTEM_ID = config(
"FLEX_AUTH_PROTECTED_SYSTEM_ID", default="coulomb-social"
)
FLEX_AUTH_TIMEOUT_SECONDS = config("FLEX_AUTH_TIMEOUT_SECONDS", default=3.0, cast=float)