coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record zone-engine compilation invariant; drop uncommitted policy leftovers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
flex-auth stays the only PDP. Zone membership reaches /v1/check as compiled
registry data, never a synchronous lookup. Uncommitted tenant-engine
read/role/grouping policy was discarded, not mixed into this pin.
This commit is contained in:
tegwick 2026-08-19 21:36:22 +02:00
parent 8605695397
commit ee6d66c005
2 changed files with 30 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tenancy.yaml
View file

@ -39,11 +39,12 @@ tenancy:
decision point judges asserted claims, it cannot be the verifier of its
own inputs. Not a defect and not a target for movement.
A: >-
Both production pins are live A2 as of 2026-08-19 on digest
sha256:138aa347… with callerAuth.mode=enforce. Unbound requests
return 401; a token bound to the other protected system returns 403.
user-engine probe from user-engine-8569d7cb87-fp7px;
tenant-engine probe from tenant-engine-6c6dcbddbb-4v26w.
All three production pins are live A2 as of 2026-08-19 on digest
sha256:138aa347… with callerAuth.mode=enforce (user-engine,
tenant-engine, isolated ops-warden). Unbound requests return 401; a
token bound to the other protected system returns 403. Zone
membership, if any, reaches this PDP only as compiled registry
data — never a synchronous zone-engine lookup.
E: >-
No tenant data at rest. Tenant scoping in decisions runs through one
choke point (internal/decision/engine.go normalizeRequest and the