flex-auth/internal
tegwick 0e020b2d8c Cover wrong-tenant denials in ops-warden and railiance-platform fixtures.
FLEX-WP-0022-T03: the rules already refused a foreign tenant; the fixture
suites never varied the field. No policy or version change. Asked
tenant-engine to name the CheckRequest tenant relation for T01/T02.

Assistant: grok
Assistant-Session: 01a0a6cb-0334-72c0-83b0-2df57474a0f6
2026-09-15 23:38:48 +02:00
..
adapters Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
audit Add local decision log 2026-05-17 05:51:37 +02:00
callerauth Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
decision Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
layer Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
markitect Add Markitect adapter contract tests 2026-05-17 06:36:52 +02:00
policy Cover wrong-tenant denials in ops-warden and railiance-platform fixtures. 2026-09-15 23:38:48 +02:00
registry Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
schemaguard Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
sign Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00