ilpanich / axiam / 29524040993

91%

push

github

docs(contract): add §11 declarative authorization helpers (#189)

* docs(contract): add §11 declarative authorization helpers

Add §11 'Declarative Authorization Helpers' to the SDK contract: the
require_auth / require_access(action, resource[, scope]) / require_role
vocabulary layered on top of the §10 middleware/route-guard, with a
per-language naming map and normative semantics (subject propagation,
resource resolution precedence, 401/403/400/503 error mapping, fail-closed
on transport failure, no decision caching, redaction).

Marked SHOULD-level for v1.0 and recorded as non-breaking/additive in the
Breaking Changes Log. Conformance statement gains a §1-§11 variant for SDKs
that ship the helpers.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* ci: re-trigger CI (flaky integration Test job on docs-only change)

The Test job runs integration tests against live SurrealDB + RabbitMQ
services and flaked on the previous run; this docs-only commit cannot affect
Rust tests. Empty commit to re-run CI; it squashes away on merge.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* ci: re-trigger CI (flaky heavy Rust jobs on docs-only change)

Previous run flaked on the Coverage job; the run before on Test — different
job each time, while the prior main commit passed all of CI. This is a
docs-only change (CONTRACT.md §11) that cannot affect Rust build/test/coverage.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

---------

Co-authored-by: Claude <noreply@anthropic.com>

1682 of 1859 branches covered (90.48%)

Branch coverage included in aggregate %.

27285 of 33258 relevant lines covered (82.04%)

71.3 hits per line