coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Make undeclared policy attribute reads a validate error.

Browse source 
FLEX-WP-0025-T03: flex-auth validate flags input.*.attributes keys that
no sibling registry or manifest supplies. A broken testdata package
proves tests can pass while the ceiling remains caller-only.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
This commit is contained in:
tegwick 2026-09-14 09:54:09 +02:00
parent 80cae28a74
commit c074237aac
10 changed files with 401 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
internal/policy/package.go
View file

@ -165,6 +165,7 @@ func (p *Package) Validate(ctx context.Context) ValidationResult {
result := ValidationResult{}
result.Diagnostics = append(result.Diagnostics, p.metadataDiagnostics()...)
result.Diagnostics = append(result.Diagnostics, p.undeclaredAttributeDiagnostics()...)
result.CaringFindings = append(result.CaringFindings, p.caringFindings()...)
if len(p.Fixtures) == 0 {
result.Diagnostics = append(result.Diagnostics, Diagnostic{