feat(authz): bind decisions to exact actions
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81
This commit is contained in:
parent
7323dd1a60
commit
c473f1971d
28 changed files with 644 additions and 12 deletions
|
|
@ -195,7 +195,8 @@ verify expected decisions before activation.
|
|||
|
||||
flex-auth must provide `check(subject, action, resource, context)` returning a
|
||||
decision envelope with effect, reason, policy version, matched rule,
|
||||
obligations, diagnostics, and provenance.
|
||||
obligations, diagnostics, provenance, and a structured binding to the exact
|
||||
normalized subject/action/resource/context request that was evaluated.
|
||||
|
||||
### FR7. Batch Authorization Checks
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue