coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sign decision envelopes and close FLEX-WP-0024.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 53s
Details

Browse source 
Detached Ed25519 over the canonical envelope with signature omitted.
Unsigned is stated, not implied. Testdata fixtures prove verify and
tamper failure without minting a production key. FLEX-WP-0025 is
finished with the validate check from the previous commit.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-14 09:57:50 +02:00
parent c074237aac
commit 127f83da4d
15 changed files with 697 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
internal/decision/engine_test.go
View file

@ -72,6 +72,9 @@ func TestCheckUsesExplicitCaringContext(t *testing.T) {
if got.Provenance.Caller == nil || got.Provenance.Caller.Mode != "disabled" || got.Provenance.Caller.Principal != "" {
t.Errorf("got.Provenance.Caller = %+v; want disabled with no principal", got.Provenance.Caller)
}
if got.Signature == nil || got.Signature.Mode != api.EnvelopeSignatureUnsigned {
t.Errorf("got.Signature = %+v; want unsigned", got.Signature)
}
}
func TestCallerProvenanceDoesNotChangeRequestDigest(t *testing.T) {