SCOPE 2.1: shared contracts package and institutional authorization hardening by fraware · Pull Request #13 · fraware/SCOPE

Add installable scientific-authorization-contracts 2.1.0 packaging.

fraware

committed

13ae76d

Move authorization algebra into scientific-authorization-contracts src package.

fraware

committed

219f047

Relocate contract schemas and vocabularies under the src package.

fraware

committed

ebd063a

Add grant profile and session-resolution contract schemas.

fraware

committed

ca8282a

Pin SCOPE 2.1.0 on scientific-authorization-contracts and drop sys.path hacks.

fraware

committed

1bfe1da

Add grant schema profiles and deprecate the local institutional grant schema.

fraware

committed

dbc59bd

Add grant finalizer for issuer-signed grant materialization.

fraware

committed

97fd5df

Add VerifiedInstitutionalReviewer identity assurance for institutional review.

fraware

committed

6d1282c

Harden session resolution artifacts and review session grant provenance.

fraware

committed

ac8c41f

Expand runtime grant authorization with richer RuntimeActionContext.

fraware

committed

369f443

Extend ledger outbox and Postgres/SQLite parity for grant lifecycle events.

fraware

committed

d3a5c97

Bind REST grant operations to authenticated principals and grant_id.

fraware

committed

177d370

Surface contracts package and vocabulary hashes in the trust manifest.

fraware

committed

98f83c4

Fail closed on production manifest, issuer, and ledger configuration.

fraware

committed

b06c396

Wire ScopeEngine to institutional identity, grant finalizer, and authorize_and_consume.

fraware

committed

ead31c5

Add institutional environment helpers, templates, and bootstrap scripts.

fraware

committed

0728bdf

Add packaging CI gates for clean-venv imports and duplicate algebra scans.

fraware

committed

0618f46

Add institutional CI profile with live Postgres workflow coverage.

fraware

committed

401c3ce

Document institutional deployment, contracts packaging, and production fail-closed gates.

fraware

committed

2d5c4f4

Align acceptance pack generation and review evals with envelope runtime paths.

fraware

committed

6156d08

Add algebra correctness and deny-all allowlist regression tests.

fraware

committed

0c9d972

Add tests for institutional identity and session resolution schemas.

fraware

committed

8925ca3

Add runtime authorize-and-consume and outbox lifecycle tests.

fraware

committed

c3760d7

Add grant finalizer and grant schema profile unit tests.

fraware

committed

71c0714

Add institutional env validation and production REST startup tests.

fraware

committed

d9cb14f

Add protocol-modification acceptance coverage for the hardened authorization path.

fraware

committed

293cd05

Update REST, privilege, and ledger tests for grant_id binding and outbox parity.

fraware

committed

2ea4eee

Align signing, manifest, and session tests with contracts package provenance.

fraware

committed

8c13f4e

Navigation Menu

Repository navigation

SCOPE 2.1: shared contracts package and institutional authorization hardening - #13

SCOPE 2.1: shared contracts package and institutional authorization hardening#13
fraware merged 28 commits into
mainfrom
feat/scope-2.1-authorization-hardening

Commits on Jul 23, 2026

Add installable scientific-authorization-contracts 2.1.0 packaging.

Move authorization algebra into scientific-authorization-contracts src package.

Relocate contract schemas and vocabularies under the src package.

Add grant profile and session-resolution contract schemas.

Pin SCOPE 2.1.0 on scientific-authorization-contracts and drop sys.path hacks.

Add grant schema profiles and deprecate the local institutional grant schema.

Add grant finalizer for issuer-signed grant materialization.

Add VerifiedInstitutionalReviewer identity assurance for institutional review.

Harden session resolution artifacts and review session grant provenance.

Expand runtime grant authorization with richer RuntimeActionContext.

Extend ledger outbox and Postgres/SQLite parity for grant lifecycle events.

Bind REST grant operations to authenticated principals and grant_id.

Surface contracts package and vocabulary hashes in the trust manifest.

Fail closed on production manifest, issuer, and ledger configuration.

Wire ScopeEngine to institutional identity, grant finalizer, and authorize_and_consume.

Add institutional environment helpers, templates, and bootstrap scripts.

Add packaging CI gates for clean-venv imports and duplicate algebra scans.

Add institutional CI profile with live Postgres workflow coverage.

Document institutional deployment, contracts packaging, and production fail-closed gates.

Align acceptance pack generation and review evals with envelope runtime paths.

Add algebra correctness and deny-all allowlist regression tests.

Add tests for institutional identity and session resolution schemas.

Add runtime authorize-and-consume and outbox lifecycle tests.

Add grant finalizer and grant schema profile unit tests.

Add institutional env validation and production REST startup tests.

Add protocol-modification acceptance coverage for the hardened authorization path.

Update REST, privilege, and ledger tests for grant_id binding and outbox parity.

Align signing, manifest, and session tests with contracts package provenance.