Refinement of flex-auth boundry and delegation

docs/enterprise-access-control-integration.md

@@ -371,6 +371,15 @@ The product survey, Keycloak/Entra analysis, and boundary recommendation now
 live in the sibling `flex-auth` repo:
 `flex-auth/docs/flex-auth-authorization-registry-research.md`.
 
+Implementation follow-up is tracked there:
+
+- `FLEX-WP-0002`: standalone policy-as-code core and check APIs.
+- `FLEX-WP-0003`: flex-auth service-side Markitect consumer integration.
+- `FLEX-WP-0004`: delegated PDP and directory adapters.
+
+Markitect should not implement a live flex-auth service client until
+`FLEX-WP-0003` stabilizes the resource-registration and check/batch_check API.
+
 ## Sources
 
 - OpenID Connect Core 1.0: https://openid.net/specs/openid-connect-core-1_0.html