History

tegwick ccf4b509be All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Deploy user-engine authorization policy		2026-08-09 02:21:29 +02:00
..
policy_fixtures.yaml	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00
policy_package.md	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00
README.md	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00
registry_snapshot.json	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00

README.md

user-engine policy service

Dynamic human subjects arrive as verified KeyCape claims, so the registry defines the protected system while the policy evaluates tenant, roles, and self context from each request. Platform operators may cross tenants; tenant administrators and self-service users may not.

Validate with:

flex-auth test-policy -file examples/user-engine/policy_package.md
flex-auth load-registry -file examples/user-engine/registry_snapshot.json