RMGR-IN-0004: reconcile flex-auth registry entry to access-engine

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 101414@bnt-lap001
Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6

INTENT.md

@@ -68,7 +68,7 @@ must be rebuildable from authoritative inputs.
 | Schedules, ops-run execution, event-triggered jobs | `activity-core` |
 | Non-repo issues | `issue-core` |
 | AuthN / user directory | identity authorities |
-| AuthZ decisions | `access-engine` (repository `flex-auth`) |
+| AuthZ decisions | `access-engine` (repository `access-engine`, formerly `flex-auth`) |
 | Secrets | OpenBao / credential custody |
 | Git hosting | Forgejo (or other forge) |
 | Temporary project coordination (`prj-*`) | project repos + their GOAL.md |

config/repository-registry.yaml

@@ -479,9 +479,9 @@ repositories:
   lifecycle: active
   forgejo_repository: coulomb/coulomb-social
 - repository_id: fda8ad85-a7d7-4055-8f21-902a533e59df
-  slug: flex-auth
+  slug: access-engine
   lifecycle: active
-  forgejo_repository: coulomb/flex-auth
+  forgejo_repository: coulomb/access-engine
 - repository_id: ff057178-b3ca-48f4-b7b5-2cda570ed12f
   slug: zone-engine
   lifecycle: active

docs/RailianceAppDeploymentGuide.md

@@ -253,7 +253,7 @@ treat "register in Fabric" as wrapping the app.
 | **B. Overlay + `railiance/app.toml`** | `bin/railiance create-overlay` in `rail-kubernetes` | Migration-era third-party wrap. Produces `<app>-railiance-overlay/`. Graduate it to Path A; do not start new overlays. |
 | **C. S5 chart in `railiance-apps`** | `charts/<app>/` + `helm/<app>-values.yaml` | How user-facing apps actually ship today. Stay here only for an already-extracted-or-not decision; new managed apps should leave as Path A. |
 
-`flex-auth` is a live Path B example (`flex-auth/railiance/app.toml`)
+`flex-auth` is a live Path B example (`access-engine/railiance/app.toml`)
 with no `rapp-*` repo. `vergabe-teilnahme` is a live Path C example.
 `rapp-policy-nexus` is the only live A←C bridge.
 

intakes/intakes.md

@@ -88,7 +88,7 @@ RMGR-IN-0003 is implemented and verified in RMGR-WP-0015.
 id: RMGR-IN-0004
 kind: intake
 title: "flex-auth → access-engine repository rename: reconcile the canonical path"
-status: open
+status: closed
 origin: cross-repo
 origin_ref: FLEX-WP-0020
 priority: low
@@ -102,4 +102,11 @@ description: >-
   reconcile the new canonical path; do not rewrite archived UUID-migration evidence. The live rename (FLEX-WP-0020-T06) has not happened; do the change
   after flex-auth announces that access-engine resolves, and record completion
   evidence here. Request message: 0a4b1825-99b1-4e1e-a4a0-448b0347b744.
+state_hub_intake_id: "01a0f268-335d-7db0-b630-a4b451c73fde"
 ```
+
+**Closed 2026-09-30:** rename landed (access-engine resolves; Forge ID 42; UUID
+fda8ad85-a7d7-4055-8f21-902a533e59df unchanged). `config/repository-registry.yaml`
+now records slug `access-engine` / `coulomb/access-engine` under the same
+`repository_id`; INTENT.md and the deployment guide name the new coordinate.
+Archived UUID-migration evidence under docs/evidence/ is untouched. `make test`: 196 passed.