Name access-engine as the only authorization decision point.

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
This commit is contained in:
tegwick 2026-09-24 09:56:48 +02:00
parent 91dc9fe145
commit 1334907d04

View file

@ -68,7 +68,7 @@ must be rebuildable from authoritative inputs.
| Schedules, ops-run execution, event-triggered jobs | `activity-core` | | Schedules, ops-run execution, event-triggered jobs | `activity-core` |
| Non-repo issues | `issue-core` | | Non-repo issues | `issue-core` |
| AuthN / user directory | identity authorities | | AuthN / user directory | identity authorities |
| AuthZ decisions | `flex-auth` (or successor) | | AuthZ decisions | `access-engine` (repository `flex-auth`) |
| Secrets | OpenBao / credential custody | | Secrets | OpenBao / credential custody |
| Git hosting | Forgejo (or other forge) | | Git hosting | Forgejo (or other forge) |
| Temporary project coordination (`prj-*`) | project repos + their GOAL.md | | Temporary project coordination (`prj-*`) | project repos + their GOAL.md |