Implement USER-WP-0024 security layer conformance
Declare Engine/PIP machine-readably, publish a total fail-closed PEP stance map, stop minting local decision ids on engine-unavailable DENY, bind allows to a 30s request lifetime, confine the local authorization double, classify evidence and emit a denial/revocation heartbeat, and prove access-control facts remain claims. Assistant: grok Assistant-Session: 01a04cea-f0d6-7ab3-9ffd-881eb6bea6cb
This commit is contained in:
parent
c7b6148a70
commit
4349758608
22 changed files with 1242 additions and 89 deletions
9
Makefile
9
Makefile
|
|
@ -1,8 +1,8 @@
|
|||
.PHONY: test test-unit test-scenarios test-integration test-conformance
|
||||
.PHONY: test test-unit test-scenarios test-integration test-conformance check-layer
|
||||
|
||||
PYTHON ?= python3
|
||||
|
||||
test: test-unit
|
||||
test: test-unit check-layer
|
||||
|
||||
test-unit:
|
||||
PYTHONPATH=src $(PYTHON) -m unittest discover -s tests -p 'test_*.py'
|
||||
|
|
@ -11,4 +11,7 @@ test-scenarios: test-unit
|
|||
|
||||
test-integration: test-unit
|
||||
|
||||
test-conformance: test-unit
|
||||
test-conformance: test-unit check-layer
|
||||
|
||||
check-layer:
|
||||
PYTHONPATH=src $(PYTHON) scripts/check_layer_conformance.py --report
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue