giles 40be9cd074 acl: Phase 4 federation (trust-gated delegation, revocation) + 31 tests ...

federation.sx adds peer/trust/delegate/level_covers facts and one engine
rule: delegated grants apply only when local trust covers the action,
re-checked every query (non-transitive, fail-safe). Local/inherited deny
overrides federated grants; delegation composes with group and resource
inheritance. acl-revoke!/acl-fed-assert! propagate retraction/assertion;
mock fed-sx transport for tests. Federated proofs reconstruct via the
existing explainer. Roadmap complete: 120/120.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-06 16:54:34 +00:00

..

direct.sx

acl: Phase 1 direct grants + deny-overrides, 24 tests

2026-06-06 16:32:13 +00:00

explain.sx

acl: Phase 3 explanation + audit, 35 tests

2026-06-06 16:47:07 +00:00

fed.sx

acl: Phase 4 federation (trust-gated delegation, revocation) + 31 tests

2026-06-06 16:54:34 +00:00

inherit.sx

acl: Phase 2 inheritance (groups, resource trees, roles) + 30 tests

2026-06-06 16:36:24 +00:00