substrate

mirror of https://github.com/agent-substrate/substrate.git synced 2026-10-02 03:24:42 +08:00

Files

T

Shruti Nair 6c60ec5d5a ateapi: [Part 1] Runtime Authorization check for Atespace CRUD (#1702 )

Working on https://github.com/agent-substrate/substrate/issues/1563

Integrates runtime OpenFGA authorization checks for `Atespace` CRUD RPCs
(`CreateAtespace`, `ListAtespaces`, `GetAtespace`, `DeleteAtespace`) and
atomic OpenFGA tuple cleanup on atespace deletion, gated behind
`--enable-authz` (`ATE_API_ENABLE_AUTHZ`).

### What's Included
- Runtime Policy Decision Point
(`cmd/ateapi/internal/authz/authorizer.go`):
- gRPC Interceptor & Declarative Registry
(`cmd/ateapi/internal/authz/interceptor.go`, `registry.go`):
- Atomic Policy Cleanup on `DeleteAtespace` (`policy_manager.go`,
`atepg.go`):
- Server Wiring (`cmd/ateapi/main.go`):

### Next (PR 3)
- Policy management RPCs

2026-09-29 23:40:43 +00:00

ate-setup

Pin envoy-dataplane from the release on a pre-built install (#1964 )

2026-09-29 21:58:58 +00:00

ateapi

ateapi: [Part 1] Runtime Authorization check for Atespace CRUD (#1702 )

2026-09-29 23:40:43 +00:00

atecontroller

Add ActorDirs message to carry per-actor directories and and split the path packages by owner (#1730 )

2026-09-25 21:03:44 +00:00

atelet

atelet: introduce declarative validation for the AteomSupport RPCs (#1903 )