tegwick
56940727bf
Close the remaining PDP obligations: mechanical layer declaration check, registry-snapshot digest in provenance, explicit allow TTL, per-input-class freshness deadlines, and the published decision-record contract. Document the canonical request digest as the §6.4.2 replay test. Assistant: grok Assistant-Session: 01a06256-fb71-7102-b3a9-27e6734257d0
19 lines
713 B
Markdown
19 lines
713 B
Markdown
# schemas/
|
|
|
|
JSON Schema definitions for flex-auth's canonical artefacts:
|
|
|
|
- `resource_manifest.schema.json` (pinned in `FLEX-WP-0005 P5.3`)
|
|
- `protected_system_manifest.schema.json`
|
|
- `subject_manifest.schema.json`
|
|
- `relationship_fact.schema.json`
|
|
- `caring_profile.schema.json`
|
|
- `caring_access_descriptor.schema.json`
|
|
- `policy_package.schema.json`
|
|
- `policy_fixture.schema.json`
|
|
- `check_request.schema.json`
|
|
- `decision_envelope.schema.json` — published decision-record contract (`flex-auth.decision-record.v1`; see `docs/decision-record-contract.md`)
|
|
- `action_authorization.schema.json`
|
|
- `audit_event.schema.json`
|
|
|
|
Schemas are pinned in `FLEX-WP-0002 P2.1` and validated against Go
|
|
types in `pkg/api/`.
|