docs: update authorization matrix progress

This commit is contained in:
Eric Wendland 2026-07-05 17:59:47 +02:00
commit 602032bfac

View file

@ -152,13 +152,13 @@ it.
Goal: finish the authorization and remote-input audit before deployment.
- `[ ]` Complete remote authorization matrix coverage.
- `[~]` Complete remote authorization matrix coverage.
Acceptance criteria:
- `[ ]` Denied and allowed paths are tested for CAS, KV, DB, document,
pubsub, pipe, SSH proxy/admin shell, SSH cert metadata, and revocations.
- `[ ]` Every remote mutating or service-opening operation has an explicit
- `[x]` Every remote mutating or service-opening operation has an explicit
resource capability check before mutation or host access.
- `[ ]` The matrix fails tests when a new remote operation lacks a guard.
- `[x]` The matrix fails tests when a new remote operation lacks a guard.
- `[ ]` Add adversarial identity and bearer tests.
Acceptance criteria: