Open SECRETS-IN-0002 for the flex-auth to access-engine rename.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 4s

Consumer-surface survey found exactly one live repository path, a local
checkout path in docs/approval-service-auth.md. Every other flex-auth string
is a runtime or contract name FLEX-DEC-2026-013 keeps. Held open until the
rename lands rather than documenting a path that does not exist yet.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 63291@bnt-lap001
Assistant-Session: 8bd77868-ca68-4f49-bb1e-d539ecc0d703
This commit is contained in:
tegwick 2026-09-21 02:38:25 +02:00
parent 550ba95a67
commit ba73dba213

View file

@ -45,3 +45,34 @@ created: '2026-08-28T21:02:14.320087Z'
updated: '2026-08-28T21:02:14.320087Z'
state_hub_intake_id: "01a04cf6-dcd7-7bd4-82e4-ef434b15fe46"
```
## SECRETS-IN-0002 — flex-auth → access-engine repository-coordinate rename (consumer surface)
```yaml
id: SECRETS-IN-0002
kind: intake
title: 'flex-auth to access-engine repository-coordinate rename: consumer-surface confirmation'
status: open
origin: cross-repo
origin_ref: FLEX-WP-0020 (hub message 15cf351a-bad8-4259-9b6f-b21d183a20ab)
priority: low
owner: secrets-engine
requested_by: flex-auth
resolution: ''
description: >-
flex-auth is preparing a repository-coordinate rename to access-engine.
Repository UUID fda8ad85-a7d7-4055-8f21-902a533e59df and Forge ID 42 are
unchanged; runtime and product names stay flex-auth per FLEX-DEC-2026-013.
secrets-engine is a consumer surface and is asked to confirm no live
repository URL or path remains. Survey 2026-09-21 found exactly one:
docs/approval-service-auth.md line 56 passes
`--flex-auth-source /home/worsch/flex-auth`, a local checkout path. Every
other flex-auth string in this repository is a runtime or contract name that
FLEX-DEC-2026-013 keeps: the Kubernetes namespace and service
flex-auth-secrets-engine.flex-auth.svc.cluster.local, the token audience
flex-auth, the contract version flex-auth.decision-record.v1, and prose
citations of flex-auth decisions and documents. Those must not be renamed.
Held open rather than edited, because the rename is preparing and not
complete, and changing a documented local checkout path ahead of the move
would document a path that does not exist yet. Close by updating that one
line when flex-auth confirms the rename has landed.