flex-auth/internal
tegwick e0c6c4389d
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Successful in 1m11s
Widen A12 enforcement from the key name to the declaration's content (GH-DEC-2026-020).
internal/layer/conformance.go enforced A12 as "no key named standard_version",
and so could not see the same pin as a versioned standard: path or as
companion_version. It now detects a version of the standard or its companion
in any key or value of the declaration (INTENT.md frontmatter, layer.yaml),
including a version in a path, and excludes comments and schema_version. It
refuses to be applied to pep-stance.yaml, pip-claims.yaml or
evidence-classification.yaml, which A12 r2 does not reach (§3).

Every run of check_layer_conformance and of the estate survey now prints the
standard version it checks against (layer.ValidatedAgainst, kings-guard's
pattern) and its scope (§4). The survey applies the same detection to peers'
declarations; the receipt is refreshed because the survey's output changed
(no peer declaration currently carries a version).

Tests fail if a versioned standard: path or a companion_version comes back.
flex-auth's own INTENT.md needed no change.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
2026-09-21 09:39:46 +02:00
..
adapters Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
audit Add local decision log 2026-05-17 05:51:37 +02:00
callerauth Record authenticated caller in the decision envelope. 2026-09-14 04:44:07 +02:00
decision Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00
layer Widen A12 enforcement from the key name to the declaration's content (GH-DEC-2026-020). 2026-09-21 09:39:46 +02:00
markitect Add Markitect adapter contract tests 2026-05-17 06:36:52 +02:00
policy Cover wrong-tenant denials in ops-warden and railiance-platform fixtures. 2026-09-15 23:38:48 +02:00
registry Finish FLEX-WP-0019 layer-model v0.7 conformance 2026-09-03 23:48:45 +02:00
schemaguard Add schemaguard; correct check_request subject.type against shipped reality 2026-09-06 14:21:28 +02:00
sign Sign decision envelopes and close FLEX-WP-0024. 2026-09-14 09:57:50 +02:00