fix(auth): authenticate producer-signed decisions before authorization
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
This commit is contained in:
tegwick 2026-10-16 07:51:44 +02:00
parent 6bd7129eac
commit c80a944105
30 changed files with 2059 additions and 32 deletions

10
verifier/pkg/api/doc.go Normal file
View file

@ -0,0 +1,10 @@
// Package api defines flex-auth's public, backend-neutral types:
// resource manifests, subject manifests, relationship facts, policy
// package metadata, check requests, and decision envelopes.
//
// These types are the stable contract consumed by protected systems
// (Markitect first) and produced by every adapter. Schema artifacts
// in schemas/ are generated from or validated against these types.
//
// Concrete type definitions land in FLEX-WP-0002 P2.1.
package api