flex-auth

Author	SHA1	Message	Date
tegwick	56940727bf	Finish FLEX-WP-0019 layer-model v0.7 conformance All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Build and Publish Container Image / build-and-push (push) Successful in 57s Details Close the remaining PDP obligations: mechanical layer declaration check, registry-snapshot digest in provenance, explicit allow TTL, per-input-class freshness deadlines, and the published decision-record contract. Document the canonical request digest as the §6.4.2 replay test. Assistant: grok Assistant-Session: 01a06256-fb71-7102-b3a9-27e6734257d0	2026-09-03 23:48:45 +02:00
tegwick	c473f1971d	feat(authz): bind decisions to exact actions All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Successful in 37s Details Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81	2026-08-23 13:18:26 +02:00
tegwick	2b103ea70b	Add local decision log	2026-05-17 05:51:37 +02:00
tegwick	faea068721	Implement list allowed and explain	2026-05-17 05:45:36 +02:00
tegwick	54984585e3	Implement deterministic check APIs	2026-05-17 05:38:57 +02:00