History

tegwick d5c91095ed All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 3s Details Build and Publish Container Image / build-and-push (push) Successful in 1m24s Details Pin IR-WP-0005-T02 review to memo version 3. The consumed T03 approval IDs cannot be created again. The T03 review package and the sitting list pins now name three new approval IDs. Binding digests and the sitting act records stay as they are. Assistant: grok Assistant-Session: 01a0e2a1-8058-7553-9999-b7d106c17047		2026-09-27 15:29:25 +02:00
..
caring	Sign decision envelopes and close FLEX-WP-0024.	2026-09-14 09:57:50 +02:00
claims	Align IAM Profile consumption with v0.2	2026-05-22 14:35:30 +02:00
informed-decision-sitting	Pin IR-WP-0005-T02 review to memo version 3.	2026-09-27 15:29:25 +02:00
informed-decision-t03	Pin IR-WP-0005-T02 review to memo version 3.	2026-09-27 15:29:25 +02:00
markitect	Make undeclared policy attribute reads a validate error.	2026-09-14 09:54:09 +02:00
ops-warden	Cover wrong-tenant denials in ops-warden and railiance-platform fixtures.	2026-09-15 23:38:48 +02:00
qonto-assistant	Register qonto-assistant as a protected system (finance.qonto.read)	2026-07-24 00:19:26 +02:00
railiance-platform	Cover wrong-tenant denials in ops-warden and railiance-platform fixtures.	2026-09-15 23:38:48 +02:00
secrets-engine	Sign decision envelopes and close FLEX-WP-0024.	2026-09-14 09:57:50 +02:00
tenant-engine	State tenant-engine's tenant relation in the write-api package, v3.	2026-09-21 07:39:57 +02:00
topaz	Implement Topaz adapter	2026-05-17 06:58:04 +02:00
user-engine	Audit package attribute reads and choose fact/assertion shape.	2026-09-14 04:47:52 +02:00
README.md	FLEX-WP-0006: implement ops-warden signing gate policy	2026-06-23 21:17:42 +02:00

README.md

examples/

Runnable examples used both as documentation and as test fixtures.

Expected layout (filled in across FLEX-WP-0002 / FLEX-WP-0003 / FLEX-WP-0005):

examples/
  claims/                  # key-cape lightweight-mode and Keycloak heavy-mode
                           # claim envelopes (P5.5)
  caring/                  # executable CARING descriptor, request,
                           # decision, registry, and audit fixtures (P2.1)
  markitect/               # FlexAuthResourceManifest fixtures, decision
                           # fixtures, and Rego-in-Markdown policy packages
  ops-warden/              # SSH certificate signing policy-gate fixtures
                           # for ops-warden policy.enabled smoke checks
  topaz/                   # docker-compose + sample directory and policy
                           # for the Topaz alignment spike (P5.4)
  policies/                # generic Rego-in-Markdown packages used by
                           # the standalone core tests