coulomb/hub-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: compose fresh owner facts with explicit binding and evidence
Some checks failed
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / pytest-smoke (push) Failing after 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929
This commit is contained in:
tegwick 2026-09-28 16:27:27 +02:00
parent f11b948e8c
commit 2a0586b4c9
5 changed files with 358 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

27
workplans/HUB-WP-0012-netkingdom-platform-root-access.md
View file

@ -470,6 +470,33 @@ Validation: **411 ordinary tests**, **six disposable PostgreSQL tests** and
**six Audit Core owner-source tests** pass. The full `make ci-check` inventory,
build and isolated installed-wheel gates pass.
## Owner facts composition — 2026-09-28
Re-reviewed User Engine `b4cef644` and Tenant Engine `4ce89969`. User Engine's
read-only `identity_context` service method is useful, but no admitted Hub
workload identity lookup/current root-grant contract is established. `/me`
still provisions unknown identities. Tenant reads still authorize asserted actor
query text without authenticating the Hub caller in the reviewed handlers.
Published a [concrete owner disposition contract](../docs/owner-facts-contract.md)
covering read-only identity lookup, global/scoped account and entitlement state,
explicit platform mapping, tenant lifecycle, dedicated caller authentication,
producer bindings, timestamps and evidence. Added `PlatformFacts`, an internal
composition of injected typed account/tenant readers, with no invented owner HTTP
endpoint. It performs fresh bounded reads, validates exact bindings/state,
preserves the oldest source observation and joins owner/mapping evidence.
Tests prove next-request withdrawal/suspension/inactivity denial before policy,
no cached fallback, and refusal of malformed/stale or unsupported observations.
T01/T02 remain `progress`: owner HTTP readers, grants, mapping disposition and
live acceptance are still missing. No owner source, credential, database or
production deployment was changed. This is preparation for an admitted adapter,
not a working connection to User Engine or Tenant Engine.
Validation: **433 ordinary tests** and **six disposable PostgreSQL tests** pass;
full `make ci-check` inventory/build/isolated-wheel checks pass. The facts module
is included in the distribution.
## Acceptance checkpoints
- [x] Architecture/source/runtime review captured; new implementation owner is hub-core