feat: add institutional contextual authorization and retire Mint by jeremi · Pull Request #1029 · registrystack/registry-stack

jeremi · 2026-09-12T21:10:16Z

Behavior

Add institutional contextual authorization using stock ThunderID 1.0.1. Casework officers approve governed task templates; an agent exchanges a short-lived Casework assertion for access constrained to the approved client, resource, purpose, subjects, operations and grant deadline. Evidence preserves requester context and enforces the signed deadline. BREG task writes use governed change requests and fresh authority status checks, including retries and approval/application transitions.

Rename BREG profile grants to permissions, expose task approval through typed client bindings, and provide local dev token and dev grant journeys. Institutional source-backed Casework development uses explicitly bound BREG readers, separate bootstrap/status clients and a public-only issuer JWKS endpoint. Ordinary source-backed tutorials can reuse the BREG stock issuer, with all-source credential validation before retained-state publication. Retire Mint source, toolset entries and maintained development launchers in favor of the stock issuer. Published v0.30.0 manifests and notes remain unchanged; migration notes describe unreleased changes.

Citizen federation is deferred. The candidate patch and citizen tooling are preserved on spike/citizen-federation-candidate and are absent from this delivery. eSignet retains its identity-provider role and existing BREG plugin contract; its companion change migrates to token_client.

Validation

Actual Casework approval → stock exchange → Evidence read and BREG governed write, followed by revocation refusal.
Actual installed source-backed Casework development journey: reconciliation, officer approval, exchange, write, restart with retained identity/deadline, and revocation with unchanged resource state.
Real stock token re-exchange after the grant deadline preserves registry_grant_exp; the Evidence resource refuses it.
BREG transactional regressions cover fresh status during retries and approval/application, receipt recovery and idempotency conflicts.
Ordinary Evidence wallet delivery, BREG issuer portability, Relay protected lookup and request attachments.
Generic, business, webhook and spatial BREG launchers; stock-issuer load-test startup, protected cursor requests and cleanup.
Standalone Casework tutorial (30 executable steps) and the BREG-to-Casework review tutorial (27 steps), including staff claim, approval and applied BREG state.
Full documentation gate and 664 nonignored Evidence CLI tests; 89 BREG contract tests and focused dev/installer regressions.
Focused package, generated-contract, client, installer, documentation and CI-selection checks. Remote checks below supply the broader regression result.

Authorization review covers exact signed context, absence of standing-profile fallback, fresh write status, bounded retained read access, public-only JWKS publication and owner-only client credentials. No deployment, release publication or tag is included.

Companion drafts

App Kit validation uses the hash-verified local companion client candidate. Ordinary installation needs a compatible future client release; this PR does not publish it.

Citizen federation deferred; candidate preserved on spike/citizen-federation-candidate.

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Work-package checkpoint for contextual authorization. Integration acceptance remains in progress; unfinished fixture migrations are intentionally WIP. Citizen federation is preserved but deferred and is not required for phases 1-3. Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Exercise registered private-key JWT issuance and the protected lookup against pinned ThunderID 1.0.1. The Docker acceptance gate passes explicitly with --ignored; normal unit runs do not gain a Docker prerequisite. Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8407737953

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8b74414164

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 01eb7f987d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-09-13T05:55:51Z

+    TaskApproved,
+    TaskRevoked,
+    TaskInvalidated,


Include task events in client history unions

Adding these variants makes history() return task_approved, task_revoked, and task_invalidated, but both registry-casework-client-node/client.d.ts and registry-casework-client-py/python/registry_casework_client/__init__.pyi still define HistoryKind without them; the unified bindings copy the same stale unions. Typed callers therefore see valid runtime responses as impossible and exhaustive event handling can silently omit every new task-grant event. Update the maintained binding types and regenerate the unified facades.

AGENTS.md reference: AGENTS.md:L381-L389

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-09-13T05:55:51Z

+        grant_id: Uuid,
+    ) -> Result<CaseworkComplete<registry_casework_core::TaskGrantRevocation>, CaseworkClientError>
+    {
+        require_source_profile(&auth)?;


Allow revocation without a source profile

When a currently eligible officer cannot read the source, this precondition makes the maintained client reject revocation locally unless the caller supplies an unrelated or fabricated source profile. The HTTP handler authenticates only the Casework profile and deliberately performs no source read, matching the documented non-source-dependent revocation flow; the Node and Python bindings likewise unnecessarily require source_profile. Remove this client precondition and align the binding signatures and OpenAPI generator.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-09-13T05:55:51Z

        validate_len(self.grants.len(), 1, 128, "authority grants")?;
        for grant in &self.grants {
            grant.validate()?;
        }
+        if self.uses_task_grant() {


Restrict task-grant profiles to delegated authority

When a profile using authenticated-grant is declared as statutory, organizational, consent, or explicit-request authority, this validation accepts it, and match_entitlement only requires AuthorityKind::Delegated when act.sub is present; Casework task assertions omit act, so a valid agent grant is authorized and audited under the non-delegated kind. Fresh evidence beyond the earlier Version 1 concern is that the updated Concept now approves task grants specifically on configured delegated paths, so reject task-grant profiles whose kind is not delegated.

AGENTS.md reference: AGENTS.md:L220-L224

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-09-13T05:55:51Z

+                description: "Explicit local service client".into(),
+                client_id: client.id.clone(),
+                public_jwks: json!({"keys":[public]}).to_string(),
+                token_attributes: attributes.keys().cloned().collect(),


Copy Evidence context through local task exchange

When caseworkctl dev provisions an Evidence task-exchange client without static claims, as in the documented serviceClients shape, this list contains only the client attributes plus registry_actor_kind; the ThunderID exchange user configuration consequently omits evidence_tags and evidence_audience even though Casework signed both into the assertion. Evidence requires those direct claims and rejects every exchanged task token, so add the Evidence assertion attribute names for clients referenced by Evidence templates without deriving their values from static client claims.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-09-13T05:55:51Z

+            && self.scopes.as_ref().is_none_or(|scopes| {
+                !scopes.is_empty()
+                    && scopes.len() <= registry_platform_httputil::MAXIMUM_REQUESTED_SCOPES


Reject aggregate scope values at profile load

When oauth.scopes contains up to 32 distinct valid 256-byte tokens whose space-joined representation exceeds 4,096 bytes, this predicate accepts the profile, but PrivateKeyJwt::new rejects the same set through MAXIMUM_SCOPE_PARAMETER_BYTES after service discovery. This leaves a deployment-invalid profile passing its documented load-time validation; include the joined scope length in this check using the shared constant.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-09-13T05:55:51Z

+        let key = registry_platform_crypto::PrivateJwk::parse(text)
+            .map_err(|_| StoreError::Configuration)?;
+        if !matches!(key.alg.as_deref(), Some("ES256" | "RS256"))
+            || key.kid.as_deref().is_none_or(str::is_empty)


Reject unusable task-authority keys at startup

When the configured JWK parses and declares ES256 or RS256 but cannot actually sign, such as a zero EC scalar, inconsistent RSA components, or a key whose algorithm does not match its material, this load path still marks the authority usable and lets the service become ready and publish its public half. Every later assertion request then fails as unavailable instead of exposing the deployment fault at startup; perform the same sign-and-public-verify probe used by PrivateKeyJwt before accepting the key.

Useful? React with 👍 / 👎.

jeremi added 30 commits September 13, 2026 02:33

docs(casework): clarify CLI examples and simulation fixture

6d76b05

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

chore(clients): checkpoint issuer migration compatibility changes

c681aa5

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(casework): prove stock issuer task exchange with BREG

3a18101

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(evidence): replace wallet issuer acceptance

208d7a5

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(evidence): replace client issuer fixture

6caea0d

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(breg): close contextual authorization gates

67e66a0

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

feat(casework): bind governed OAuth scopes to task approval

bfa0a8e

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

feat(clients): expose approved task OAuth scopes

ad51f8c

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

docs(casework): specify scopes and token-only machine endpoints

c6e401c

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(relay): retain stock issuer gate in HTTP journeys

1106793

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): render permissions in source reader configuration

a7bab05

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

docs(auth): remove retired issuer guidance from client tooling

9707d98

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(casework): run retained lifecycle with stock issuer

1e09d84

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

build(release): retire Mint from current distribution

cd08919

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

chore(mint): remove retired issuer

0f68554

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

test(breg): prove fresh task status before automatic apply

ec8c059

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

docs(evidence): regenerate authentication key-path reference

9b8d1bb

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

feat(tooling): acquire Casework approved task grants

336b947

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

feat(casework): expose governed Evidence context in client bindings

df1bbc7

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): configure source reader OAuth token bounds

2834498

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

docs: retire current Registry Mint guidance

090b6b7

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): keep optional context types compatible with Python 3.10

b1afce7

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

docs: introduce BREG abbreviation

d1142c6

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

chatgpt-codex-connector Bot reviewed Sep 13, 2026

View reviewed changes

Comment thread crates/registry-casework-core/src/task_grant.rs Outdated

Comment thread crates/registry-casework/src/task_grants.rs

Comment thread crates/registry-casework/src/task_grants.rs Outdated

Comment thread crates/registry-evidence-oid4vci/src/authorizer.rs Outdated

jeremi force-pushed the feat/contextual-authorization branch from 8407737 to 8b74414 Compare September 13, 2026 04:54

chatgpt-codex-connector Bot reviewed Sep 13, 2026

View reviewed changes

Comment thread crates/registry-evidence/src/selector.rs

Comment thread crates/registry-casework/src/task_grants.rs

Comment thread release/scripts/release_candidate.py

jeremi added 14 commits September 13, 2026 12:18

fix(breg): require actor kind on access tokens

be0cb34

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(docs): remove retired Mint tutorial steps

c8f1192

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(auth): attribute approved task grants

2c790d0

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): refuse delegated officer sessions

c530092

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(audit): retain grant context on writes and refusals

7adba8c

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): allow eligible officers to revoke grants

2bf536b

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): align task purpose validation

5911785

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(evidence): reject unused grant constraints

ae4496c

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(breg): require trusted actor for agent actions

498576b

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(evidence): validate OAuth resource bytes at profile load

b98c690

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(breg): reject overlapping authority claim roles

cb21c1b

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): align task grant bounds validation

30a3951

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(evidence): reject reserved grants at wallet offers

ffd3e56

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): distinguish stale task approvals

a1e7d7b

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

jeremi force-pushed the feat/contextual-authorization branch from 8b74414 to a1e7d7b Compare September 13, 2026 05:19

jeremi added 2 commits September 13, 2026 12:28

docs(evidence): align institutional task-grant scope

5137a69

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

fix(casework): invalidate grants after approver role changes

01eb7f9

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>

jeremi enabled auto-merge (squash) September 13, 2026 05:33

jeremi merged commit e90c67a into main Sep 13, 2026
52 checks passed

jeremi deleted the feat/contextual-authorization branch September 13, 2026 05:47

chatgpt-codex-connector Bot reviewed Sep 13, 2026

View reviewed changes

jeremi mentioned this pull request Sep 15, 2026

chore(scripts): build and link every local command for unreleased testing #1071

Merged

2 tasks

Navigation Menu

feat: add institutional contextual authorization and retire Mint - #1029

feat: add institutional contextual authorization and retire Mint#1029
jeremi merged 120 commits into
mainfrom
feat/contextual-authorization

jeremi commented Sep 12, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

jeremi commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Behavior

Validation

Companion drafts

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Sep 13, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

jeremi commented Sep 12, 2026 •

edited

Loading