History

tegwick acbaa4a7c9 All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Successful in 37s Details feat(policy): add credential grant authorization package Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02e47-6aac-7ee1-914d-0584c75d3c81		2026-08-23 13:59:03 +02:00
..
check_request_allow.json	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
check_request_deny_unknown.json	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
policy_fixtures.yaml	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
policy_package.md	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
protected_system_manifest.yaml	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
README.md	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
registry_snapshot.json	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
resource_manifest.yaml	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00
subject_manifest.yaml	feat(policy): add credential grant authorization package	2026-08-23 13:59:03 +02:00

README.md

Railiance Platform credential-grant example

This package provides the flex-auth side of FLEX-WP-0012: registered grant metadata, representative requester subjects, a default-deny issue policy, and fixtures for TTL, actor type, purpose, delivery mode, and unknown grants.

The wire translation is intentionally outside the policy. Both candidate integration shapes must emit requested_ttl_seconds as a positive number; duration strings such as 15m are rejected rather than guessed.

go run ./cmd/flex-auth load-registry --file examples/railiance-platform/registry_snapshot.json
go run ./cmd/flex-auth test-policy --file examples/railiance-platform/policy_package.md
go run ./cmd/flex-auth check --registry examples/railiance-platform/registry_snapshot.json --policy examples/railiance-platform/policy_package.md --request examples/railiance-platform/check_request_allow.json
go run ./cmd/flex-auth check --registry examples/railiance-platform/registry_snapshot.json --policy examples/railiance-platform/policy_package.md --request examples/railiance-platform/check_request_deny_unknown.json