A policy-as-code capable authorization registry/control-plane service.
Find a file
tegwick d5c91095ed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s
Build and Publish Container Image / build-and-push (push) Successful in 1m24s
Pin IR-WP-0005-T02 review to memo version 3.
The consumed T03 approval IDs cannot be created again. The T03 review
package and the sitting list pins now name three new approval IDs.
Binding digests and the sitting act records stay as they are.

Assistant: grok
Assistant-Session: 01a0e2a1-8058-7553-9999-b7d106c17047
2026-09-27 15:29:25 +02:00
.claude/rules docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 2) 2026-07-08 16:41:17 +02:00
.forgejo/workflows Publish images via CI; file staged-promotion overlay debt 2026-08-11 10:35:34 +02:00
.github/workflows Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.repo-manager Publish approval_binding_digest: a claim cannot name the request carrying it 2026-09-06 14:52:33 +02:00
charts/flex-auth Enforce caller-auth on flex-auth-user-engine and record the live A2 probe 2026-08-19 14:00:53 +02:00
cmd/flex-auth FLEX-WP-0031-T03: durable decision outbox and the FLEX-DEC-2026-018 release rule 2026-09-23 20:20:58 +02:00
decisions FLEX-WP-0031-T03: durable decision outbox and the FLEX-DEC-2026-018 release rule 2026-09-23 20:20:58 +02:00
deploy deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
docs Admit list for the informed-decision overview as compact-sitting v3 (FLEX-DEC-2026-017). 2026-09-21 23:06:40 +02:00
examples Pin IR-WP-0005-T02 review to memo version 3. 2026-09-27 15:29:25 +02:00
history Align INTENT and SCOPE to security layer model v0.7; plan conformance work 2026-08-29 14:43:49 +02:00
intakes chore(registrar): assign State Hub identifiers 2026-08-29 02:45:11 +02:00
internal FLEX-WP-0031-T03: durable decision outbox and the FLEX-DEC-2026-018 release rule 2026-09-23 20:20:58 +02:00
pkg/api FLEX-WP-0031-T03: durable decision outbox and the FLEX-DEC-2026-018 release rule 2026-09-23 20:20:58 +02:00
railiance deploy: record tenant-engine live digest 05a03a87 promoted 2026-09-11 2026-09-23 19:54:34 +02:00
registry Add capability registry with seed entry from reuse-surface 2026-06-16 01:46:54 +02:00
schemas Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
tests Enforce caller-auth on flex-auth-ops-warden (FLEX-WP-0016-T03) 2026-08-19 20:10:31 +02:00
tools Admit list for the informed-decision overview as compact-sitting v3 (FLEX-DEC-2026-017). 2026-09-21 23:06:40 +02:00
values Pin compact sitting v3 on the dedicated release (revision 3). 2026-09-21 23:53:02 +02:00
workplans chore: record hub ids for FLEX-WP-0031 T05/T06 and regenerate WORK-RECORDS.md 2026-09-23 20:22:25 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-09-23 20:22:10 +02:00
.gitignore Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.golangci.yml Land foundations: assessment, ADR-001/002/003, FLEX-WP-0005, Go skeleton 2026-05-16 01:54:44 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md docs(agents): repoint remote State Hub URL to the in-cluster address 2026-08-25 00:21:00 +02:00
cadence.yaml Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
CLAUDE.md Add credential routing instructions for all agent runtimes 2026-06-18 22:48:37 +02:00
Containerfile Package flex-auth policy service 2026-08-09 01:35:30 +02:00
Containerfile.t03-review Admit T03 version-two reviews while preserving current sitting records 2026-09-16 01:08:56 +02:00
go.mod Implement policy package loader 2026-05-17 05:30:40 +02:00
go.sum Implement policy package loader 2026-05-17 05:30:40 +02:00
INTENT.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-30 00:16:31 +02:00
Makefile Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
README.md Prepare the access-engine repository coordinate without applying the rename. 2026-09-15 23:38:48 +02:00
SCOPE.md Apply gate-house's section 11 rulings: four-token validator, emission guarantee, resource.system. 2026-09-21 06:35:30 +02:00
tenancy.yaml fix(posture): remove redundant implemented level 2026-08-22 15:22:33 +02:00
WORK-RECORDS.md chore: record hub ids for FLEX-WP-0031 T05/T06 and regenerate WORK-RECORDS.md 2026-09-23 20:22:25 +02:00

flex-auth

Policy-as-code authorization registry and control plane for NetKingdom-aligned systems.

The live Forge and State Hub coordinate is still flex-auth (repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df, Forge ID 42). FLEX-WP-0020 will rename that coordinate to access-engine and keep the Go module, binary, FLEX_AUTH_* variables, Helm releases, container package coulomb/flex-auth, and policy/API vocabulary unchanged. Work-record frontmatter stays repo: flex-auth until State Hub rebind. Planned clone: https://forgejo.coulomb.social/coulomb/access-engine.git.

Start with INTENT.md for the project boundary and direction. Research notes and ADRs live in docs/ and docs/adr/.

The product boundary is captured in SCOPE.md, and the current Product Requirements Document is docs/ProductRequirementsDocument.md.

The 2026-05-15 pre-implementation assessment that shapes the current sequencing is in docs/pre-implementation-assessment.md.

The CARING reference-implementation approach is captured in docs/caring-architecture-blueprint.md.

Workplans live in workplans/, with sequencing captured in docs/workplan-planning-map.md.