coulomb/tenant-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish TEN-WP-0005-T05: ship lifecycle image and verify production

Browse source 
Pin tenant-engine to the CI-built digest from 7e68cc8, record rollback
digests, and close T05 after live create/update/retire/replay/reactivate
evidence against a disposable production tenant. Hands the 0.1.0 contract
to USER-WP-0021.
This commit is contained in:
tegwick 2026-08-14 01:42:41 +02:00
parent 7e68cc835e
commit 9ed391aec7
4 changed files with 30 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/tenant-lifecycle-api.md
View file

@ -164,10 +164,12 @@ thereby granting a retirement:
| `tenant.retire` | `tenant` |
| `tenant.reactivate` | `tenant` |
These must be added to the flex-auth policy package alongside the existing
`tenant.create`, `tenant.role.grant`, `tenant.role.revoke`, and
`tenant.plan.assign` actions. Until they exist, checks resolve to deny —
correct fail-closed behaviour, not a defect.
These sit alongside the existing `tenant.create`, `tenant.role.grant`,
`tenant.role.revoke`, and `tenant.plan.assign` actions in package
`tenant-engine.write-api.mutate` v1. Production flex-auth serves the
seven-action revision from image
`forgejo.coulomb.social/coulomb/flex-auth@sha256:9320df394a642eff24da8af4a0ee8886a7bb78b0f14d8ee1deeb30ea8eeeaba7`
(commit `e9911eb`). Unknown action strings still deny.
---