From 1334907d04bf02d84f0da44adfb892112a5e5c3e Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Thu, 24 Sep 2026 09:56:48 +0200
Subject: [PATCH] Name access-engine as the only authorization decision point.

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
---
 INTENT.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/INTENT.md b/INTENT.md
index 1511458..cf07854 100644
--- a/INTENT.md
+++ b/INTENT.md
@@ -68,7 +68,7 @@ must be rebuildable from authoritative inputs.
 | Schedules, ops-run execution, event-triggered jobs | `activity-core` |
 | Non-repo issues | `issue-core` |
 | AuthN / user directory | identity authorities |
-| AuthZ decisions | `flex-auth` (or successor) |
+| AuthZ decisions | `access-engine` (repository `flex-auth`) |
 | Secrets | OpenBao / credential custody |
 | Git hosting | Forgejo (or other forge) |
 | Temporary project coordination (`prj-*`) | project repos + their GOAL.md |