tegwick
ca070df32d
FLEX-WP-0023-T04: provenance.caller is additive (mode required; principal/audience/not_after when a token was reviewed). TokenReview keeps the JWT exp. request_digest is unchanged because the caller is not binding material. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267 |
||
|---|---|---|
| .. | ||
| access_descriptor.yaml | ||
| action_authorization.json | ||
| audit_event.json | ||
| batch_check_request.yaml | ||
| check_request.yaml | ||
| decision_envelope.json | ||
| exposure_event.json | ||
| inherited_relationships.yaml | ||
| policy_fixture.yaml | ||
| policy_package.md | ||
| policy_package.yaml | ||
| project_resource_manifest.yaml | ||
| README.md | ||
| redact_policy_package.md | ||
| registry_snapshot.json | ||
| relationship_fact.yaml | ||
| subject_manifest.yaml | ||
| team_subject_manifest.yaml | ||
CARING examples
Small fixtures for the executable CARING 0.4.0-RC2 profile used by
FLEX-WP-0002.
These are intentionally compact. They prove that the canonical descriptor,
request, decision, registry, audit, and Rego-in-Markdown policy package
shapes can round-trip through pkg/api and internal/policy.
The set includes local subjects, groups, teams, project resources, inherited relationship facts, exposure events, allow/deny fixtures, and a redact-with-obligation policy package.