The highest tagged major version is
Documentation
¶
Overview ¶
Package serve is the network surface over the decision, and nothing else.
It is a SEPARATE package because the decision leaf must stay pure: a caller importing github.com/hanzoai/authz links no HTTP stack, no driver, no socket, so adding a caller costs nothing. Speaking HTTP is I/O, and I/O lives here.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Mount ¶
Mount registers /v1/authz/* on the shared cloud app (HIP-0106).
It takes only the canonical logger — the surface has no other dependency on the host, so this stays a standalone module and cloud's composition root adapts its own dependencies by passing the one thing needed.
The surface is STATELESS, like the decision it exposes: a check carries the grants it is to be decided against. There is no policy store and no policy CRUD here, because the grant SET belongs to IAM — IAM signs it, so IAM owns it, and a second writable copy behind this surface would be a second source of truth for who may do what.
Types ¶
This section is empty.
Source Files