generated from coulomb/repo-seed
tegwick
3247f5d357
Bootstrap registry layout and migrate helix_forge capability owned by this repository (REUSE-WP-0014-T02).
80 lines
2.0 KiB
Markdown
80 lines
2.0 KiB
Markdown
---
|
|
id: capability.authorization.policy-evaluate
|
|
name: Authorization Policy Evaluation
|
|
summary: Evaluate access decisions from policy-as-code rules for subjects, resources, and actions.
|
|
owner: flex-auth
|
|
status: draft
|
|
domain: helix_forge
|
|
tags: [authorization, policy, flex-auth]
|
|
|
|
maturity:
|
|
discovery:
|
|
current: D4
|
|
target: D6
|
|
confidence: medium
|
|
rationale: flex-auth INTENT defines policy-as-code boundary and enterprise growth path.
|
|
availability:
|
|
current: A2
|
|
target: A5
|
|
confidence: low
|
|
rationale: Policy registry and evaluation logic exist in repo; service packaging evolving.
|
|
|
|
external_evidence:
|
|
completeness:
|
|
level: C2
|
|
name: Partial
|
|
confidence: low
|
|
basis: scope_vs_intent_and_consumer_expectations
|
|
satisfied_expectations:
|
|
- policy-as-code intent documented
|
|
broken_expectations:
|
|
- not yet indexed from flex-auth native registry
|
|
out_of_scope_expectations:
|
|
- identity proofing
|
|
reliability:
|
|
level: R1
|
|
confidence: low
|
|
basis: consumer_quality_signals
|
|
known_reliability_risks:
|
|
- early implementation phase
|
|
|
|
discovery:
|
|
intent: >
|
|
Provide inspectable authorization decisions between verified identity and
|
|
protected resources using policy-as-code.
|
|
includes:
|
|
- policy evaluation
|
|
- authorization registry
|
|
- decision explainability
|
|
excludes:
|
|
- identity issuance
|
|
- authentication protocols
|
|
use_cases: []
|
|
|
|
availability:
|
|
current_level: A2
|
|
target_level: A5
|
|
current_artifacts:
|
|
- flex-auth/
|
|
consumption_modes:
|
|
- source module
|
|
|
|
relations:
|
|
depends_on:
|
|
- capability.identity.subject-resolution
|
|
related_to:
|
|
- capability.feature-control.evaluate
|
|
|
|
consumer_guidance:
|
|
recommended_for:
|
|
- planning authorization layer between identity and resources
|
|
not_recommended_for:
|
|
- feature visibility toggles without policy intent
|
|
known_limitations:
|
|
- maturity evidence is registry-external today
|
|
---
|
|
|
|
# Authorization Policy Evaluation
|
|
|
|
Policy evaluation from flex-auth sits between identity resolution and protected
|
|
systems. |