Module auth_lys

Expand description

Subject decisions delegated to the shared pass consumer.

Product resource bindings come from admitted placements, never from splitting subject spelling. The consumer owns verification and placement reach.

Re-exports§

live: The live Lys question over HTTP (ACCESS-002 R1, ACCESS-003 R1).
lys_pass_adapter: The one real LysPassConsumer: lys-pass verifying a pass offline and deciding hot actions from its rights (ACCESS-001 R2, Lys ACCESS-003).
prepared: Prepared calls borrow the bearer inside its admitted authentication owner.
root_presence: SRV-038: whether the network has a root in its Lys, asked when the grants are complete and said out loud.
root_presence_start: SRV-039: the root question on a server that has Lys and no grant stream.
routes: Exhaustive route classifications for the existing wire surfaces.
session: The admitted Lys pass as a connection holds it.

AccessDecisionError: A typed refusal whose wire representation is the shared envelope.
AccessRefusal: Shared refusal envelope; no credential or payload bytes. Its JSON is byte-identical to lys-pass’s Refusal for the same target.
AccessResource: Exact authority resource, independent of the subject’s display spelling.
AdmittedLysPass: A pass admitted only through the configured offline consumer.
DeliberateAction: A deliberate action presented to the hot seam.
GrantReceipt: Grant to receipt in the product’s operation log.
NeededGrant: The grant a refusal says is needed: Lys’s needed member, exactly.
RequiredGrant: The four shared refusal fields, in the bytes Lys’s Refused has.
SubjectBinding: Explicit product mapping supplied from admitted resource placements.
SubjectBindingError: An absent or pattern-based subject mapping.

AccessAction: Actions shared by the subject, link and service consumers.
AccessRouteClass: Single-valued permission class declared by a data route.
DecisionClass: Permission classification fixed by the product schema.
DeliberateDecision: A live decision; held acts have no permission to execute yet.
GrantMode: Grant mode selected by the authority, never a service-side default.
HotAction: The only actions accepted by the per-message offline seam.
RefusalCause: Typed cause retained beside the common wire envelope.
ResourceKind: Resource kinds registered by the product schema.

LysDeliberateConsumer: Live-only decision seam shared with deliberately classified services.
LysPassConsumer: Shared-library integration seam, implemented by the pinned pass adapter.
LysPolicySource: Read-only policy source; budget and stop policy remains authority-owned.

admit_lys_pass: Admits a second credential without changing the existing signed pass bytes.
decide_deliberate: Makes a live decision for a route explicitly classified deliberate.
decide_message: Makes exactly one fresh offline decision for this message.
verified_lys_holder: Borrows the native holder established by this same offline verification.