Close the remaining PDP obligations: mechanical layer declaration check, registry-snapshot digest in provenance, explicit allow TTL, per-input-class freshness deadlines, and the published decision-record contract. Document the canonical request digest as the §6.4.2 replay test. Assistant: grok Assistant-Session: 01a06256-fb71-7102-b3a9-27e6734257d0 |
||
|---|---|---|
| .. | ||
| action_authorization.schema.json | ||
| audit_event.schema.json | ||
| caring_access_descriptor.schema.json | ||
| caring_profile.schema.json | ||
| check_request.schema.json | ||
| decision_envelope.schema.json | ||
| policy_fixture.schema.json | ||
| policy_package.schema.json | ||
| protected_system_manifest.schema.json | ||
| README.md | ||
| relationship_fact.schema.json | ||
| resource_manifest.schema.json | ||
| subject_manifest.schema.json | ||
schemas/
JSON Schema definitions for flex-auth's canonical artefacts:
resource_manifest.schema.json(pinned inFLEX-WP-0005 P5.3)protected_system_manifest.schema.jsonsubject_manifest.schema.jsonrelationship_fact.schema.jsoncaring_profile.schema.jsoncaring_access_descriptor.schema.jsonpolicy_package.schema.jsonpolicy_fixture.schema.jsoncheck_request.schema.jsondecision_envelope.schema.json— published decision-record contract (flex-auth.decision-record.v1; seedocs/decision-record-contract.md)action_authorization.schema.jsonaudit_event.schema.json
Schemas are pinned in FLEX-WP-0002 P2.1 and validated against Go
types in pkg/api/.