coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
flex-auth/internal/decision
History
tegwick ca070df32d
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m0s
Details
Record authenticated caller in the decision envelope. 
FLEX-WP-0023-T04: provenance.caller is additive (mode required;
principal/audience/not_after when a token was reviewed). TokenReview
keeps the JWT exp. request_digest is unchanged because the caller is
not binding material.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
2026-09-14 04:44:07 +02:00
..
doc.go Implement deterministic check APIs 2026-05-17 05:38:57 +02:00
engine.go Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
engine_test.go Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
enrichment_precedence_test.go fix(decision): registry facts win over caller-supplied attributes 2026-09-07 13:43:33 +02:00