tegwick
7e0c62a8b5
Adds migrations/0001_registries.sql (licensors, phase_manifests, extensions tables; trf_app role with no UPDATE/DELETE grant on either table, canonicalization only via a SECURITY DEFINER function), and src/target_revenue/registry.py + service/app.py: a thin FastAPI layer wrapping the existing validation.py checks with persistence and per-Licensor token auth, adding no new validation logic per ADR-0002. New optional service/service-dev dependency groups keep the core offline library dependency-free. tests/test_registry_hosting.py (7 tests, Docker-gated, auto-skip otherwise) spins an ephemeral disposable Postgres container and verifies registration, rejection, duplicate/ unknown-token handling, extension canonicalization, and two explicit database-privilege checks that the app role cannot bypass the append-only/governance-gated guarantees.
3 lines
212 B
Python
3 lines
212 B
Python
"""Hosted Trust Service (WP-0006). Thin ASGI layer over `target_revenue`'s
|
|
already-tested schema, validation, and registry logic — see ADR-0002 for
|
|
why this stays thin rather than reimplementing that logic."""
|