History

tegwick b74756791a All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Build and Publish Container Image / build-and-push (push) Successful in 32s Details Authorize scoped public registration applicants		2026-08-14 09:26:12 +02:00
..
policy_fixtures.yaml	Authorize scoped public registration applicants	2026-08-14 09:26:12 +02:00
policy_package.md	Authorize scoped public registration applicants	2026-08-14 09:26:12 +02:00
README.md	Deploy user-engine authorization policy	2026-08-09 02:21:29 +02:00
registry_snapshot.json	Authorize scoped public registration applicants	2026-08-14 09:26:12 +02:00

README.md

user-engine policy service

Dynamic human subjects arrive as verified KeyCape claims, so the registry defines the protected system while the policy evaluates tenant, roles, and self context from each request. Platform operators may cross tenants; tenant administrators and self-service users may not.

Validate with:

flex-auth test-policy -file examples/user-engine/policy_package.md
flex-auth load-registry -file examples/user-engine/registry_snapshot.json