feat(access-control-prover): define production family contract

This commit is contained in:
Marius Ciepluch
2026-11-01 15:02:04 +01:00
parent 30df6b36ba
commit fd3d8ac1e6
3 changed files with 204 additions and 1 deletions
+1 -1
View File
@@ -331,7 +331,7 @@ its final resolution, dominance, fact-acquisition and measurement semantics with
- _Depends: 12.6, 13.3_
- [ ] 14. Reviewed detection-core fact adapter
- [ ] 14.1 Define the production access-control family contract
- [x] 14.1 Define the production access-control family contract
- Encode the versioned access-control security object, roles, three decision rules, residual question and closed incompleteness reasons through public detection-core types.
- Keep target names confined to the reviewed ecosystem declaration while pinning every digest-affecting field, status, origin policy and decision semantic declared by the design.
- Done when the canonical production contract validates, round-trips deterministically, and rejects every altered or undeclared role, decision, field and reason fixture.