From 999970cd253fb8a5eb4239fa77619062276f1184 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 10 Oct 2026 15:26:24 +0200 Subject: [PATCH] Build the access-engine binary in the approval exercise tool FLEX-DEC-2026-020 renamed ./cmd/flex-auth to ./cmd/access-engine and left a stub that exits 2. Receipt keys and the --flex-auth-source flag stay so existing evidence keeps its shape. Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 544698@bnt-lap001 Assistant-Session: 279b8520-335f-4041-ba2a-9491335473db --- tools/exercise_approval_identity.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tools/exercise_approval_identity.py b/tools/exercise_approval_identity.py index 9fd73fb..f9796b1 100644 --- a/tools/exercise_approval_identity.py +++ b/tools/exercise_approval_identity.py @@ -95,9 +95,9 @@ def exercise(args): with tempfile.TemporaryDirectory(prefix="approval-identity-private-") as temporary: root = Path(temporary) source = args.flex_auth_source.resolve() - run(["go", "build", "-C", str(source), "-o", str(root / "flex-auth"), "./cmd/flex-auth"]) + run(["go", "build", "-C", str(source), "-o", str(root / "access-engine"), "./cmd/access-engine"]) producer_files = source / "examples/secrets-engine" - receipt["flex_auth_binary_sha256"] = hashlib.sha256((root / "flex-auth").read_bytes()).hexdigest() + receipt["flex_auth_binary_sha256"] = hashlib.sha256((root / "access-engine").read_bytes()).hexdigest() receipt["producer_input_sha256"] = { name: hashlib.sha256((producer_files / name).read_bytes()).hexdigest() for name in ("policy_package.md", "registry_snapshot.json") @@ -110,7 +110,7 @@ def exercise(args): path = root / "check-request.json" path.write_text(json.dumps(request)) path.chmod(0o600) - self.last_decision = json.loads(run([str(root / "flex-auth"), "check", + self.last_decision = json.loads(run([str(root / "access-engine"), "check", "-policy", str(producer_files / "policy_package.md"), "-registry", str(producer_files / "registry_snapshot.json"), "-request", str(path)])) return self.last_decision