coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
flex-auth/schemas/README.md
tegwick 56940727bf
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details
Build and Publish Container Image / build-and-push (push) Successful in 57s
Details
Finish FLEX-WP-0019 layer-model v0.7 conformance 
Close the remaining PDP obligations: mechanical layer declaration check,
registry-snapshot digest in provenance, explicit allow TTL, per-input-class
freshness deadlines, and the published decision-record contract. Document
the canonical request digest as the §6.4.2 replay test.

Assistant: grok
Assistant-Session: 01a06256-fb71-7102-b3a9-27e6734257d0
2026-09-03 23:48:45 +02:00

713 B
Raw Blame History

schemas/

JSON Schema definitions for flex-auth's canonical artefacts:

  • resource_manifest.schema.json (pinned in FLEX-WP-0005 P5.3)
  • protected_system_manifest.schema.json
  • subject_manifest.schema.json
  • relationship_fact.schema.json
  • caring_profile.schema.json
  • caring_access_descriptor.schema.json
  • policy_package.schema.json
  • policy_fixture.schema.json
  • check_request.schema.json
  • decision_envelope.schema.json — published decision-record contract (flex-auth.decision-record.v1; see docs/decision-record-contract.md)
  • action_authorization.schema.json
  • audit_event.schema.json

Schemas are pinned in FLEX-WP-0002 P2.1 and validated against Go types in pkg/api/.