History

tegwick 9e6de5a50d All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Record production gap for FLEX-WP-0010 and re-probe FLEX-WP-0009 FLEX-WP-0010-T04: the deployed flex-auth-tenant-engine Deployment bakes the policy package into its image, so production still serves the four-action policy -- probed live, tenant.retire returns deny unknown_action there while tenant.create allows. TEN-WP-0005-T05 is unblocked in source but needs an image build from `8e127e5` and a rollout, which this workplan does not scope. Stated in the workplan and in examples/tenant-engine/README.md rather than left implied. FLEX-WP-0009-T04: replayed all six user-engine fixtures against the deployed flex-auth-user-engine service; all six matched expected effect and reason, confirming the deployed failure matrix is still fail-closed. T04 stays in progress -- the criterion also requires user-engine to retire its local bridge, which is not flex-auth's to close. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-08-10 20:55:41 +02:00
..
caring	Add CARING examples and coverage	2026-05-17 06:05:18 +02:00
claims	Align IAM Profile consumption with v0.2	2026-05-22 14:35:30 +02:00
markitect	Add Markitect check fixtures	2026-05-17 06:32:05 +02:00
ops-warden	FLEX-WP-0007: production registry fixture, tests, and sync runbook	2026-06-24 14:52:35 +02:00
qonto-assistant	Register qonto-assistant as a protected system (finance.qonto.read)	2026-07-24 00:19:26 +02:00
tenant-engine	Record production gap for FLEX-WP-0010 and re-probe FLEX-WP-0009	2026-08-10 20:55:41 +02:00
topaz	Implement Topaz adapter	2026-05-17 06:58:04 +02:00
user-engine	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00
README.md	FLEX-WP-0006: implement ops-warden signing gate policy	2026-06-23 21:17:42 +02:00

README.md

examples/

Runnable examples used both as documentation and as test fixtures.

Expected layout (filled in across FLEX-WP-0002 / FLEX-WP-0003 / FLEX-WP-0005):

examples/
  claims/                  # key-cape lightweight-mode and Keycloak heavy-mode
                           # claim envelopes (P5.5)
  caring/                  # executable CARING descriptor, request,
                           # decision, registry, and audit fixtures (P2.1)
  markitect/               # FlexAuthResourceManifest fixtures, decision
                           # fixtures, and Rego-in-Markdown policy packages
  ops-warden/              # SSH certificate signing policy-gate fixtures
                           # for ops-warden policy.enabled smoke checks
  topaz/                   # docker-compose + sample directory and policy
                           # for the Topaz alignment spike (P5.4)
  policies/                # generic Rego-in-Markdown packages used by
                           # the standalone core tests