From 02f896555a49ac29d28f9027890644037d1ca7bd Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 24 Sep 2026 09:56:43 +0200 Subject: [PATCH] Name access-engine as the only authorization decision point. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f --- INTENT.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/INTENT.md b/INTENT.md index 2d28707..cf24348 100644 --- a/INTENT.md +++ b/INTENT.md @@ -34,9 +34,10 @@ depends: - **NetKingdom** owns its security architecture, its standards of record, including the security layer model, and any NetKingdom-specific profiles that import this canon. -- **flex-auth** owns authorization decisions; **key-cape** and Keycloak own - login, OIDC, and MFA; **OpenBao** owns secret custody. SecurityCanon describes - those concepts; it does not perform them. +- **access-engine** (the repository is still `flex-auth`) owns authorization + decisions; **key-cape** and Keycloak own login, OIDC, and MFA; **OpenBao** + owns secret custody. SecurityCanon describes those concepts; it does not + perform them. There is one decision point. - **whitehat-security** owns adversarial evidence and findings practice. - **InfoTechCanon** remains the authority for the shared roots — artifact, ownership, relationship, mapping, assimilation, profile, pattern, conformance,