marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-11-14 18:18:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(access-control-prover): locate family contract boundary

Browse Source
This commit is contained in:
Marius Ciepluch
2026-11-01 14:58:53 +01:00
parent 8991f44ee3
commit 30df6b36ba
3 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/access-control-prover/tasks.md
+1 -1
View File
@@ -333,7 +333,7 @@ its final resolution, dominance, fact-acquisition and measurement semantics with
- [ ] 14. Reviewed detection-core fact adapter
- [ ] 14.1 Define the production access-control family contract
- Encode the versioned access-control security object, roles, three decision rules, residual question and closed incompleteness reasons through public detection-core types.
- Keep target names outside the contract while pinning every digest-affecting field, status, origin policy and ecosystem declared by the design.
- Keep target names confined to the reviewed ecosystem declaration while pinning every digest-affecting field, status, origin policy and decision semantic declared by the design.
- Done when the canonical production contract validates, round-trips deterministically, and rejects every altered or undeclared role, decision, field and reason fixture.
- _Requirements: 13.1_
- _Boundary: Access-Control Family Contract_