Skip to main content

authority_delegation/
lib.rs

1//! Typed delegated-authority surface crate for post-v20 artifact families.
2//!
3//! The crate keeps its compatibility name, but it publishes typed authority
4//! surfaces and bounded helper profiles rather than a general access-control runtime.
5//!
6//! ## Integration Points
7//!
8//! - **forge-pilot observe phase:** `governance_gate.rs` (`#[cfg(feature = "governance")]`) reads
9//!   authority lease validity, delegation chain state, and break glass grant status from
10//!   semantic-memory projections.
11//! - **forge-pilot act phase:** capability class blast radius ceilings and authority lease
12//!   scope constrain which effects the loop is permitted to execute.
13//! - **verification-control:** authority chain validity and delegation revocation case types
14//!   are affected; separation of duties policy violations trigger verification cases.
15//! - **Stack Arena scenarios:** governed lane exercises governance observation of authority
16//!   lease boundaries and delegation chain integrity.
17//!
18//! ## Artifact Families
19//!
20//! | Artifact | Schema Version | Owner |
21//! |----------|---------------|-------|
22//! | [`CapabilityClassV1`] | `CapabilityClassV1` | this crate |
23//! | [`AuthorityLeaseV1`] | `AuthorityLeaseV1` | this crate |
24//! | [`DelegationBundleV1`] | `DelegationBundleV1` | this crate |
25//! | [`AuthorityChainV1`] | `AuthorityChainV1` | this crate |
26//! | [`BreakGlassGrantV1`] | `BreakGlassGrantV1` | this crate |
27//! | [`DelegationRevocationV1`] | `DelegationRevocationV1` | this crate |
28//! | [`ActingOnBehalfReceiptV1`] | `ActingOnBehalfReceiptV1` | this crate |
29//! | [`SeparationOfDutiesPolicyV1`] | `SeparationOfDutiesPolicyV1` | this crate |
30//! | [`DualControlApprovalV1`] | `DualControlApprovalV1` | this crate |
31//! | [`ConflictDisclosureV1`] | `ConflictDisclosureV1` | this crate |
32
33pub mod capability;
34pub mod emergency;
35pub mod error;
36pub mod profile_p3_roles;
37pub mod sod;
38
39pub use capability::*;
40pub use emergency::*;
41pub use error::*;
42pub use profile_p3_roles::*;
43pub use sod::*;