-
Notifications
You must be signed in to change notification settings - Fork 1
feat: export provider-neutral authorization records v0.1 #167
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from 9 commits
Commits
Show all changes
17 commits
Select commit
Hold shift + click to select a range
ba340c5
docs: add ProofPath authorization export profile
safal207 2168ff7
feat: add provider-neutral authorization record schema
safal207 2788e8c
feat: add deterministic authorization export verifier
safal207 42ac4c7
test: add authorization export conformance fixtures
safal207 e8bd264
fix: derive exports and handoffs from semantic fixtures
safal207 6ec9f59
test: add authorization report evaluation context
safal207 6249451
test: independently verify authorization semantics
safal207 d8faf43
ci: verify authorization export semantics
safal207 4173a7c
docs: align authorization profile with semantic verifier
safal207 0fa380f
fix: separate intrinsic and report-time authority state
safal207 bd04c21
fix: keep report-derived state outside canonical schema
safal207 d3a9fd1
refactor: replace authorization export verifier
safal207 3faadc7
fix: derive report-time authority outside export record
safal207 e9bd9cb
refactor: replace independent authorization verifier
safal207 c252de3
fix: independently separate intrinsic and report-time state
safal207 06af587
docs: separate intrinsic and report-time authority state
safal207 187e8ca
ci: disable persisted checkout credentials
safal207 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| name: Authorization Record Export | ||
|
|
||
| on: | ||
| pull_request: | ||
| paths: | ||
| - "conformance/authorization-record-*.json" | ||
| - "docs/interop/PROOFPATH_AUTHORIZATION_RECORD_EXPORT_V0_1.md" | ||
| - "schemas/proofpath-authorization-record-v0.1.schema.json" | ||
| - "scripts/check_authorization_record_export.py" | ||
| - "scripts/verify_authorization_record_export.py" | ||
| - ".github/workflows/authorization-record-export.yml" | ||
| push: | ||
| branches: | ||
| - main | ||
| paths: | ||
| - "conformance/authorization-record-*.json" | ||
| - "docs/interop/PROOFPATH_AUTHORIZATION_RECORD_EXPORT_V0_1.md" | ||
| - "schemas/proofpath-authorization-record-v0.1.schema.json" | ||
| - "scripts/check_authorization_record_export.py" | ||
| - "scripts/verify_authorization_record_export.py" | ||
| - ".github/workflows/authorization-record-export.yml" | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| verify: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/setup-python@v5 | ||
| with: | ||
| python-version: "3.12" | ||
| - name: Reproduce canonical authorization exports | ||
| run: python3 scripts/check_authorization_record_export.py | ||
| - name: Independently verify lifecycle and handoff semantics | ||
| run: python3 scripts/verify_authorization_record_export.py | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.