coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish FLEX-WP-0017
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a05e2e-805b-7042-a750-71f473bceea2
This commit is contained in:
tegwick 2026-09-01 20:21:58 +02:00
parent c9a4c98907
commit 58fbd46ff9
4 changed files with 46 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

29
workplans/FLEX-WP-0017-action-bound-authorization-contract.md
View file

@ -4,13 +4,13 @@ type: workplan
title: "Action-bound authorization and durable approval contract"
domain: infotech
repo: flex-auth
status: active
status: finished
owner: codex
topic_slug: netkingdom
planning_priority: P1
planning_order: 117
created: "2026-08-23"
updated: "2026-08-23"
updated: "2026-09-01"
state_hub_workstream_id: "d75b7256-8b3d-5797-911c-96c3199b8baa"
---
@ -57,7 +57,7 @@ drift fails the suite.
```task
id: FLEX-WP-0017-T03
status: wait
status: cancel
priority: high
state_hub_task_id: "82d39961-8140-5a7f-9bd8-5164dd1742e5"
```
@ -77,6 +77,12 @@ unowned: it is not gate-house's, because Staff holds no state another layer
depends on at runtime (standard §3.4), and not flex-auth's, for the reason
above. Raised to gate-house as an engine gap under §5. Task stays `wait`.
Final disposition 2026-09-01: cancelled in this workplan after the security
layer model assigned the durable approval object, authenticated approvals,
storage, and lifecycle to `approval-engine`. This is an ownership transfer, not
a claim that the external capability is implemented. flex-auth consumes the
result as an input claim and does not store or mutate it.
## Propagate bindings through delegated evaluators
```task
@ -93,7 +99,7 @@ success and fail-closed responses using the shared canonical constructor.
```task
id: FLEX-WP-0017-T05
status: wait
status: cancel
priority: high
state_hub_task_id: "8c3fc0a2-0855-5ac9-afa5-d03b8b1f0bf9"
```
@ -102,3 +108,18 @@ After T03, secrets-engine validates the canonical object before every
privileged production action and proves wrong action/lane/stage/targets,
expiry, supersession, outage, insufficient approvals, and duplicate approvers
all fail before any OpenBao call. Live destroy stays disabled until that proof.
Final disposition 2026-09-01: cancelled in this workplan because enforcement
and live destructive-action proof belong to the protected-system consumer,
`secrets-engine`. flex-auth's handoff is the canonical request binding,
published schema, and fail-closed contract delivered by T01, T02, and T04. This
disposition does not enable live destroy or waive the consumer proof.
## Closeout
Finished 2026-09-01. flex-auth delivered the execute-time binding, canonical
durable-object vocabulary, contract documentation, schema, adapter propagation,
and regression coverage. The two remaining tasks were cancelled here after the
accepted layer model placed durable approval lifecycle with `approval-engine`
and enforcement with `secrets-engine`; those external obligations remain
fail-closed prerequisites and are not represented as completed flex-auth work.