# flex-auth

Policy-as-code authorization registry and control plane for NetKingdom-aligned
systems.

The live Forge and State Hub coordinate is still `flex-auth` (repository UUID
`fda8ad85-a7d7-4055-8f21-902a533e59df`, Forge ID `42`). `FLEX-WP-0020` will
rename that coordinate to `access-engine` and keep the Go module, binary,
`FLEX_AUTH_*` variables, Helm releases, container package
`coulomb/flex-auth`, and policy/API vocabulary unchanged. Work-record
frontmatter stays `repo: flex-auth` until State Hub rebind. Planned clone:
`https://forgejo.coulomb.social/coulomb/access-engine.git`.

Start with [INTENT.md](INTENT.md) for the project boundary and direction.
Research notes and ADRs live in [docs/](docs/) and [docs/adr/](docs/adr/).

The product boundary is captured in [SCOPE.md](SCOPE.md), and the current
Product Requirements Document is
[docs/ProductRequirementsDocument.md](docs/ProductRequirementsDocument.md).

The 2026-05-15 pre-implementation assessment that shapes the current
sequencing is in
[docs/pre-implementation-assessment.md](docs/pre-implementation-assessment.md).

The CARING reference-implementation approach is captured in
[docs/caring-architecture-blueprint.md](docs/caring-architecture-blueprint.md).

Workplans live in [workplans/](workplans/), with sequencing captured in
[docs/workplan-planning-map.md](docs/workplan-planning-map.md).