marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-18 12:39:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(authorization-obligations): cover criterion 4.5 in task 5.1; tasks approved, ready for implementation

Browse Source 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
This commit is contained in:
Marius Ciepluch
2026-09-05 16:46:28 +02:00
co-authored by Claude Fable 5.1
parent 88cda276aa
commit c53eddd69d
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/authorization-obligations/spec.json
+6 -6
View File
@@ -1,9 +1,9 @@
{ {
"feature_name": "authorization-obligations", "feature_name": "authorization-obligations",
"created_at": "2026-09-05T17:00:00Z", "created_at": "2026-09-05T17:00:00Z",
"updated_at": "2026-09-05T18:30:00Z", "updated_at": "2026-09-05T19:10:00Z",
"language": "en", "language": "en",
"phase": "design-generated", "phase": "tasks-generated",
"approvals": { "approvals": {
"requirements": { "requirements": {
"generated": true, "generated": true,
@@ -14,15 +14,15 @@
"approved": true "approved": true
}, },
"tasks": { "tasks": {
"generated": false, "generated": true,
"approved": false "approved": true
} }
}, },
"ready_for_implementation": false, "ready_for_implementation": true,
"depends_on": [ "depends_on": [
"reachability-flow-model", "reachability-flow-model",
"guard-dominance-regime", "guard-dominance-regime",
"corpus-seeded-mechanisms" "corpus-seeded-mechanisms"
], ],
"approval_note": "2026-09-05 requirements and design approved by the maintainer in session" "approval_note": "2026-09-05 requirements, design and tasks approved by the maintainer in session"
} }
.kiro/specs/authorization-obligations/tasks.md
+1 -1
View File
@@ -97,7 +97,7 @@
- [ ] 5.1 Validator dispatch on shape family and pending policy clauses - [ ] 5.1 Validator dispatch on shape family and pending policy clauses
- `validate_mechanism` dispatches on `shape["family"]`: obligation rows check operation kind, discharger kind, provenance and resource class against the closed sets; `PolicyClauseEdit(kind, fields, evidence, rationale)` validated against the policy schema and journaled under `pending_policy_clauses`, never applied. - `validate_mechanism` dispatches on `shape["family"]`: obligation rows check operation kind, discharger kind, provenance and resource class against the closed sets; `PolicyClauseEdit(kind, fields, evidence, rationale)` validated against the policy schema and journaled under `pending_policy_clauses`, never applied.
- Observable: an obligation row with `discharger_kind = "if user"` is rejected; a valid row admits; a clause edit lands in the journal as pending and a following scan reads no policy from it. - Observable: an obligation row with `discharger_kind = "if user"` is rejected; a valid row admits; a clause edit lands in the journal as pending and a following scan reads no policy from it.
- _Requirements: 8.1, 8.2, 8.4, 8.5_ - _Requirements: 4.5, 8.1, 8.2, 8.4, 8.5_
- _Boundary: Lever_ - _Boundary: Lever_
- _Depends: 1.3_ - _Depends: 1.3_