3247f5d357
Add capability registry with seed entry from reuse-surface
...
CI / Build and Test (push) Waiting to run
CI / Lint (push) Waiting to run
Bootstrap registry layout and migrate helix_forge capability owned by
this repository (REUSE-WP-0014-T02).
2026-06-16 01:46:54 +02:00
aa8e3a4e34
Align IAM Profile consumption with v0.2
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-22 14:35:30 +02:00
8354485632
Make INTENT.md self-coherent
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Remove external reference points so the intent stands on its own at the
abstract, stable level: drop named identity/SSO systems, named PDP/policy
products, named directory/enterprise systems, the named first-consumer
project, and the external IAM-profile path. Keep all of flex-auth's own
substance — purpose, responsibility boundary (stated as abstract roles:
identity layer / authorization / enforcement points), design principles,
concepts, API shape, standalone vs delegated mode, non-goals, early work.
Relationships to other systems belong in interface contracts and the
orchestration responsibility map, not in intent.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-21 01:46:12 +02:00
12c4bed6f4
Refresh agent instruction files
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-18 16:55:41 +02:00
af3e8b2af2
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 07:28:16 +02:00
99a521e176
Document delegated mode operations
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 07:27:45 +02:00
1f5e9626e5
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 07:25:20 +02:00
32933c71f9
Add directory group resolver adapters
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 07:24:50 +02:00
ac9cf09545
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 07:19:17 +02:00
360025e38b
Add Keycloak authorization adapter path
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 07:18:45 +02:00
3fdbc7acb7
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 07:13:56 +02:00
ad4895187b
Add rule PDP adapter boundary
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 07:13:27 +02:00
4bb329c921
Add relationship PDP adapter boundary
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 07:06:14 +02:00
90021d16b6
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 07:04:59 +02:00
8a61e40bd6
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:58:50 +02:00
1ce0181e8f
Implement Topaz adapter
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:58:04 +02:00
0fbb2a45c2
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:41:41 +02:00
184ce5a380
Document Markitect integration flow
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:41:07 +02:00
131fd2cd9b
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:37:27 +02:00
3d1967cb41
Add Markitect adapter contract tests
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:36:52 +02:00
7e09a21c5f
Add Markitect check fixtures
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:32:05 +02:00
96e53bf1d9
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:31:11 +02:00
1c915f12d7
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:26:49 +02:00
b6712850c3
Define Markitect action vocabulary
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:26:13 +02:00
50e436093a
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:22:05 +02:00
9e2591c1f4
Import Markitect resource manifests
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:21:28 +02:00
dd4f688ab6
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:16:45 +02:00
12dbf52586
Mark core workplan completed
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:16:13 +02:00
a285959183
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:14:49 +02:00
6586adb4f5
Define Markitect resource namespace
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:14:04 +02:00
4c9f964425
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:08:42 +02:00
6bff4cd7c9
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:05:47 +02:00
18054bd160
Add CARING examples and coverage
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 06:05:18 +02:00
49655e40e0
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 06:00:25 +02:00
61e113f8b6
Add CLI and service skeleton
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:59:48 +02:00
ccf68332f8
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:52:12 +02:00
2b103ea70b
Add local decision log
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:51:37 +02:00
4342f98d83
chore(consistency): sync task status from DB [auto]
...
CI / Lint (push) Has been cancelled
CI / Build and Test (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:46:22 +02:00
faea068721
Implement list allowed and explain
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:45:36 +02:00
aa70dbebe1
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:39:41 +02:00
54984585e3
Implement deterministic check APIs
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:38:57 +02:00
fa1b42e678
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:31:20 +02:00
550d096cb2
Implement policy package loader
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:30:40 +02:00
2cce434d47
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:11:06 +02:00
3c4f8fc2b4
Implement local registry store
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 05:10:17 +02:00
4f4c290684
chore(consistency): sync task status from DB [auto]
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Updated by fix-consistency on 2026-05-17:
- update .custodian-brief.md for flex-auth
2026-05-17 05:01:55 +02:00
7fdf6d63d5
Implement canonical schema foundation
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 04:59:18 +02:00
dd0b9663c4
Refine workplans for CARING profile
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
2026-05-17 04:15:38 +02:00
f930e96568
IAM Profile consumption doc + claim fixtures; close FLEX-WP-0005
...
CI / Build and Test (push) Has been cancelled
CI / Lint (push) Has been cancelled
Completes FLEX-WP-0005 T05 and closes the Foundations and Topaz
Alignment workstream.
docs/iam-profile-consumption.md captures flex-auth's input surface
against NetKingdom IAM Profile v0.1:
- boundary (flex-auth consumes verified claims; upstream layer
validates signatures and audiences)
- normalized input envelope (matches Markitect's EnterpriseIdentity)
- required, recommended, and tolerated claim variations
- role-claim location union (top-level / realm_access / resource_access)
- scope encoding (string vs array)
- principal-type detection (human / service / emergency)
- group-overage and freshness expectations
- production vs local-development handling
examples/claims/ ships five contract fixtures:
- key-cape-lightweight.yaml (profile minimum)
- keycloak-heavy.yaml (full variation set + MFA)
- service-account.yaml (svc-* hub-to-hub)
- emergency.yaml (break-glass with incident metadata)
- keycloak-group-overage.yaml (Entra-style hasgroups: true)
All fixtures parse as valid YAML. They become contract tests for the
standalone evaluator (FLEX-WP-0002 P2.4) and the Topaz adapter
(FLEX-WP-0004 T01); both code paths must produce identical normalized
envelopes for the same fixture.
FLEX-WP-0005 workstream marked status=done in this file and completed
in the State Hub. FLEX-WP-0002 is now fully unblocked.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-16 09:09:36 +02:00
7471e07cbb
Include topaz bundle .manifest in the spike example
...
Dotfile was missed by the previous git add — bundle/.manifest is the
OPA bundle root manifest Topaz consults to know which Rego packages
belong in the bundle.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-16 09:05:04 +02:00
