flex-auth/internal
tegwick ca070df32d
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 1m0s
Record authenticated caller in the decision envelope.
FLEX-WP-0023-T04: provenance.caller is additive (mode required;
principal/audience/not_after when a token was reviewed). TokenReview
keeps the JWT exp. request_digest is unchanged because the caller is
not binding material.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
2026-09-14 04:44:07 +02:00
..
adapters Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
audit Add local decision log 2026-05-17 05:51:37 +02:00
callerauth Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
decision Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
layer Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
markitect Add Markitect adapter contract tests 2026-05-17 06:36:52 +02:00
policy Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
registry Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
schemaguard Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00