From 2fb58fbeee8f323f57669a1aa07f9f9de599d3df Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 30 Sep 2026 18:58:37 +0200 Subject: [PATCH] RAIL-FAB-WP-0031: follow access-engine rename (T01/T02 done, T03 live ingest needs operator) Co-Authored-By: Claude Sonnet 5.5 Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 101414@bnt-lap001 Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6 --- .../flex-auth-iam-profile-key-cape.yaml | 2 +- .../flex-auth-runtime-secrets-openbao.yaml | 2 +- fabric/bindings/flex-auth-topaz-runtime.yaml | 2 +- ...flex-auth-api-authorization-decisions.yaml | 2 +- ...flex-auth-topaz-authorization-runtime.yaml | 2 +- .../flex-auth-api-iam-profile.yaml | 2 +- .../flex-auth-api-runtime-secrets.yaml | 2 +- .../flex-auth-api-topaz-runtime.yaml | 2 +- fabric/interfaces/flex-auth-api-http-api.yaml | 2 +- .../flex-auth-api-policy-package.yaml | 2 +- .../interfaces/flex-auth-topaz-http-api.yaml | 2 +- fabric/services/flex-auth-api.yaml | 2 +- fabric/services/flex-auth-topaz.yaml | 2 +- registry/local-repos.yaml | 8 +++---- registry/railiance-repos.yaml | 6 +++--- ...-WP-0031-flex-auth-access-engine-rename.md | 21 ++++++++++++++++--- 16 files changed, 38 insertions(+), 23 deletions(-) diff --git a/fabric/bindings/flex-auth-iam-profile-key-cape.yaml b/fabric/bindings/flex-auth-iam-profile-key-cape.yaml index f681e4f..31e64cb 100644 --- a/fabric/bindings/flex-auth-iam-profile-key-cape.yaml +++ b/fabric/bindings/flex-auth-iam-profile-key-cape.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.iam-profile-to-key-cape name: flex-auth IAM Profile binding owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/bindings/flex-auth-runtime-secrets-openbao.yaml b/fabric/bindings/flex-auth-runtime-secrets-openbao.yaml index e3df610..253e738 100644 --- a/fabric/bindings/flex-auth-runtime-secrets-openbao.yaml +++ b/fabric/bindings/flex-auth-runtime-secrets-openbao.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.runtime-secrets-to-openbao name: flex-auth runtime secrets binding owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/bindings/flex-auth-topaz-runtime.yaml b/fabric/bindings/flex-auth-topaz-runtime.yaml index a8e2b5c..b98095e 100644 --- a/fabric/bindings/flex-auth-topaz-runtime.yaml +++ b/fabric/bindings/flex-auth-topaz-runtime.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.topaz-runtime-binding name: flex-auth Topaz runtime binding owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/capabilities/flex-auth-api-authorization-decisions.yaml b/fabric/capabilities/flex-auth-api-authorization-decisions.yaml index fb1c079..64afcd1 100644 --- a/fabric/capabilities/flex-auth-api-authorization-decisions.yaml +++ b/fabric/capabilities/flex-auth-api-authorization-decisions.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.authorization-decisions name: flex-auth authorization decisions owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/capabilities/flex-auth-topaz-authorization-runtime.yaml b/fabric/capabilities/flex-auth-topaz-authorization-runtime.yaml index bc5db9c..32620c2 100644 --- a/fabric/capabilities/flex-auth-topaz-authorization-runtime.yaml +++ b/fabric/capabilities/flex-auth-topaz-authorization-runtime.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.topaz.authorization-runtime name: Topaz authorization runtime owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/dependencies/flex-auth-api-iam-profile.yaml b/fabric/dependencies/flex-auth-api-iam-profile.yaml index 3295a12..8b25af5 100644 --- a/fabric/dependencies/flex-auth-api-iam-profile.yaml +++ b/fabric/dependencies/flex-auth-api-iam-profile.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.needs-iam-profile name: flex-auth IAM Profile dependency owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance source_links: - label: Seed dependency declaration diff --git a/fabric/dependencies/flex-auth-api-runtime-secrets.yaml b/fabric/dependencies/flex-auth-api-runtime-secrets.yaml index 5ef7e6b..8cb3cd6 100644 --- a/fabric/dependencies/flex-auth-api-runtime-secrets.yaml +++ b/fabric/dependencies/flex-auth-api-runtime-secrets.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.needs-runtime-secrets name: flex-auth runtime secrets dependency owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance source_links: - label: Seed dependency declaration diff --git a/fabric/dependencies/flex-auth-api-topaz-runtime.yaml b/fabric/dependencies/flex-auth-api-topaz-runtime.yaml index 37d7dd8..7f7c894 100644 --- a/fabric/dependencies/flex-auth-api-topaz-runtime.yaml +++ b/fabric/dependencies/flex-auth-api-topaz-runtime.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.needs-topaz-runtime name: flex-auth Topaz runtime dependency owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance source_links: - label: Seed dependency declaration diff --git a/fabric/interfaces/flex-auth-api-http-api.yaml b/fabric/interfaces/flex-auth-api-http-api.yaml index 9ee6010..2bb5524 100644 --- a/fabric/interfaces/flex-auth-api-http-api.yaml +++ b/fabric/interfaces/flex-auth-api-http-api.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.http-api name: flex-auth decision HTTP API owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/interfaces/flex-auth-api-policy-package.yaml b/fabric/interfaces/flex-auth-api-policy-package.yaml index 5ea7336..013730e 100644 --- a/fabric/interfaces/flex-auth-api-policy-package.yaml +++ b/fabric/interfaces/flex-auth-api-policy-package.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api.policy-package name: flex-auth policy package owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/interfaces/flex-auth-topaz-http-api.yaml b/fabric/interfaces/flex-auth-topaz-http-api.yaml index 15209b3..97eac0f 100644 --- a/fabric/interfaces/flex-auth-topaz-http-api.yaml +++ b/fabric/interfaces/flex-auth-topaz-http-api.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.topaz.http-api name: Topaz decision HTTP API owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/services/flex-auth-api.yaml b/fabric/services/flex-auth-api.yaml index 3849242..f550359 100644 --- a/fabric/services/flex-auth-api.yaml +++ b/fabric/services/flex-auth-api.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.api name: flex-auth API owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/fabric/services/flex-auth-topaz.yaml b/fabric/services/flex-auth-topaz.yaml index f1c9c3e..a10e97b 100644 --- a/fabric/services/flex-auth-topaz.yaml +++ b/fabric/services/flex-auth-topaz.yaml @@ -4,7 +4,7 @@ metadata: id: flex-auth.topaz name: Topaz delegated PDP owner: flex-auth - repo: flex-auth + repo: access-engine domain: railiance spec: lifecycle: active diff --git a/registry/local-repos.yaml b/registry/local-repos.yaml index 71d847c..ecb230b 100644 --- a/registry/local-repos.yaml +++ b/registry/local-repos.yaml @@ -143,13 +143,13 @@ repositories: path: /home/worsch/fin-hub default_branch: main remote_url: forgejo-remote:coulomb/fin-hub.git -- slug: flex-auth - name: flex-auth +- slug: access-engine + name: access-engine domain: netkingdom - path: /home/worsch/flex-auth + path: /home/worsch/access-engine default_branch: main state_hub_repo_id: fda8ad85-a7d7-4055-8f21-902a533e59df - remote_url: forgejo-remote:coulomb/flex-auth.git + remote_url: forgejo-remote:coulomb/access-engine.git - slug: fluid-core name: fluid-core path: /home/worsch/fluid-core diff --git a/registry/railiance-repos.yaml b/registry/railiance-repos.yaml index c68a993..2e93ad2 100644 --- a/registry/railiance-repos.yaml +++ b/registry/railiance-repos.yaml @@ -116,9 +116,9 @@ repositories: primary_rail: rail-kubernetes substrate_kind: server-group - - slug: flex-auth - name: flex-auth - path: /home/worsch/flex-auth + - slug: access-engine + name: access-engine + path: /home/worsch/access-engine default_branch: main state_hub_repo_id: fda8ad85-a7d7-4055-8f21-902a533e59df diff --git a/workplans/RAIL-FAB-WP-0031-flex-auth-access-engine-rename.md b/workplans/RAIL-FAB-WP-0031-flex-auth-access-engine-rename.md index 8077c61..61d5562 100644 --- a/workplans/RAIL-FAB-WP-0031-flex-auth-access-engine-rename.md +++ b/workplans/RAIL-FAB-WP-0031-flex-auth-access-engine-rename.md @@ -11,7 +11,7 @@ origin_ref: FLEX-WP-0020 owner: codex topic_slug: railiance created: "2026-09-22" -updated: "2026-09-27" +updated: "2026-09-30" state_hub_workstream_id: "631e2974-55ba-58e3-b8ca-dc6c1c294111" --- @@ -31,7 +31,7 @@ Origin: handoff request from flex-auth on 2026-09-15 (hub message ```task id: RAIL-FAB-WP-0031-T01 -status: wait +status: done priority: medium state_hub_task_id: "ded92fd8-cdd1-56b1-ad83-547b0b619cc8" ``` @@ -44,7 +44,7 @@ repository is `coulomb/access-engine` and the local checkout is ```task id: RAIL-FAB-WP-0031-T02 -status: wait +status: done priority: medium state_hub_task_id: "3c9c7773-f6e4-5473-a6cf-1154e9add1a2" ``` @@ -60,6 +60,8 @@ state_hub_task_id: "3c9c7773-f6e4-5473-a6cf-1154e9add1a2" ```task id: RAIL-FAB-WP-0031-T03 status: wait +needs_human: true +blocking_reason: "Live re-ingest feeds the running Fabric registry service (production write via `railiance-fabric registry`); operator runs it, then confirms the graph. Local export evidence is recorded below." priority: medium state_hub_task_id: "74f58428-6ee9-52f6-98b9-4b3d9e524b33" ``` @@ -81,3 +83,16 @@ repository UUID and Forge ID 42. Then update coordinates and re-ingest under T02/T03, preserving all `flex-auth.*` runtime identities. Preemptive manifest changes would point to a missing checkout; no declarations or historical snapshots were renamed during this review. + +## Execution — 2026-09-30 + +FLEX-WP-0020 executed (access-engine head b943d9a; Forge ID 42; checkout +`~/access-engine`). T01 satisfied. T02 done: `registry/local-repos.yaml` and +`registry/railiance-repos.yaml` now name slug/name/path/remote_url `access-engine` +(`state_hub_repo_id` unchanged), and 13 `fabric/**` declarations moved from +`repo: flex-auth` to `repo: access-engine`; every `flex-auth.*` node id, service name +and file name is unchanged. `railiance-fabric validate .`: 0 errors, 0 warnings; +`unresolved`: none. Local `export --format json`: no `flex-auth` repository +reference remains, `flex-auth.*` runtime ids present (69 references). The repo's +pytest env lacks pytest/`railiance_fabric` on the path (pre-existing), so unit tests +were not run. T03's live re-ingest is an operator step (see task).