coulomb/flex-auth
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
flex-auth/schemas
History
tegwick ca070df32d
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m0s
Details
Record authenticated caller in the decision envelope. 
FLEX-WP-0023-T04: provenance.caller is additive (mode required;
principal/audience/not_after when a token was reviewed). TokenReview
keeps the JWT exp. request_digest is unchanged because the caller is
not binding material.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
2026-09-14 04:44:07 +02:00
..
action_authorization.schema.json Accept ActionAuthorization deferral; fix the state-hub authority constant 2026-09-06 01:30:04 +02:00
audit_event.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
caring_access_descriptor.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
caring_profile.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
check_request.schema.json Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
decision_envelope.schema.json Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
policy_fixture.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
policy_package.schema.json Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
protected_system_manifest.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
README.md Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
relationship_fact.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
resource_manifest.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00
subject_manifest.schema.json Implement canonical schema foundation 2026-05-17 04:59:18 +02:00

README.md

schemas/

JSON Schema definitions for flex-auth's canonical artefacts:

  • resource_manifest.schema.json (pinned in FLEX-WP-0005 P5.3)
  • protected_system_manifest.schema.json
  • subject_manifest.schema.json
  • relationship_fact.schema.json
  • caring_profile.schema.json
  • caring_access_descriptor.schema.json
  • policy_package.schema.json
  • policy_fixture.schema.json
  • check_request.schema.json
  • decision_envelope.schema.json — published decision-record contract (flex-auth.decision-record.v1; see docs/decision-record-contract.md)
  • action_authorization.schema.json
  • audit_event.schema.json

Schemas are pinned in FLEX-WP-0002 P2.1 and validated against Go types in pkg/api/.