apiVersion: railiance.fabric/v1alpha1
kind: DependencyDeclaration
metadata:
  id: flex-auth.api.needs-topaz-runtime
  name: flex-auth Topaz runtime dependency
  owner: flex-auth
  repo: flex-auth
  domain: railiance
  source_links:
    - label: Seed dependency declaration
      path: fabric/README.md
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  consumer_service_id: flex-auth.api
  requires:
    capability_type: authorization-decision-service
    capability_id: flex-auth.topaz.authorization-runtime
  interface:
    type: http-api
    version_constraint: ">=v1 <v2"
  auth:
    method: oidc
  criticality: high
  data_classification: restricted
  fallback:
    mode: degraded
    description: flex-auth can fall back to limited local policy checks only for non-critical paths.