tegwick
127f83da4d
Detached Ed25519 over the canonical envelope with signature omitted. Unsigned is stated, not implied. Testdata fixtures prove verify and tamper failure without minting a production key. FLEX-WP-0025 is finished with the validate check from the previous commit. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267 |
||
|---|---|---|
| .. | ||
| access_descriptor.yaml | ||
| action_authorization.json | ||
| audit_event.json | ||
| batch_check_request.yaml | ||
| check_request.yaml | ||
| decision_envelope.json | ||
| exposure_event.json | ||
| inherited_relationships.yaml | ||
| policy_fixture.yaml | ||
| policy_package.md | ||
| policy_package.yaml | ||
| project_resource_manifest.yaml | ||
| README.md | ||
| redact_policy_package.md | ||
| registry_snapshot.json | ||
| relationship_fact.yaml | ||
| subject_manifest.yaml | ||
| team_subject_manifest.yaml | ||
CARING examples
Small fixtures for the executable CARING 0.4.0-RC2 profile used by
FLEX-WP-0002.
These are intentionally compact. They prove that the canonical descriptor,
request, decision, registry, audit, and Rego-in-Markdown policy package
shapes can round-trip through pkg/api and internal/policy.
The set includes local subjects, groups, teams, project resources, inherited relationship facts, exposure events, allow/deny fixtures, and a redact-with-obligation policy package.