Implement USER-WP-0024 security layer conformance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 36s

Declare Engine/PIP machine-readably, publish a total fail-closed PEP
stance map, stop minting local decision ids on engine-unavailable DENY,
bind allows to a 30s request lifetime, confine the local authorization
double, classify evidence and emit a denial/revocation heartbeat, and
prove access-control facts remain claims.

Assistant: grok
Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb
This commit is contained in:
tegwick 2026-08-29 12:53:16 +02:00
parent c7b6148a70
commit 4349758608
22 changed files with 1242 additions and 89 deletions

View file

@ -1,8 +1,8 @@
.PHONY: test test-unit test-scenarios test-integration test-conformance
.PHONY: test test-unit test-scenarios test-integration test-conformance check-layer
PYTHON ?= python3
test: test-unit
test: test-unit check-layer
test-unit:
PYTHONPATH=src $(PYTHON) -m unittest discover -s tests -p 'test_*.py'
@ -11,4 +11,7 @@ test-scenarios: test-unit
test-integration: test-unit
test-conformance: test-unit
test-conformance: test-unit check-layer
check-layer:
PYTHONPATH=src $(PYTHON) scripts/check_layer_conformance.py --report