acting_for 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 416659519f04a4cf5f2639684e6078fe51766cf1eb727ac7b9cde851207d4f9e
-  data.tar.gz: b976be543b26602045c4f0db0152bbf5e051c028c54f18f70e2aae335f702a9e
+  metadata.gz: d170cbb1f6f0da3a2c26f3d55a55bb86b3533c8b27fe969f074efaee57536406
+  data.tar.gz: 1d86bdc3e38378efba926f9de1f56b6dce1fc120ae7f20a4685ca29fb184ea8b
 SHA512:
-  metadata.gz: 5173d14fb39328a07f28957a365a4dbafe845f8dfbc4b2a73045f57f2c69a40ba6f96de9306b21a77d7b16d9cd10b6f136e93567f771bb5c0df0df082f4f11b3
-  data.tar.gz: 31cb9911b3a8efa9d4a6e54a5c30fb4eff45f15e0f54a1007391727959d37b10503e8da45ff994cd26389d345d51e26651fa3fdc0f46c490f9ae503c91fb2bab
+  metadata.gz: 192ab4f6a44a4b05662307260191ccbc32fbe62109e5c63039ee6d171e498e983992244044653ce653d3c6fa9917bace46bfa96e7c173bee0abaa52bea3c0a76
+  data.tar.gz: bc98cace73ba017a48a3ed8bb76172e9d040509cf2cc2533bb30ea4cb793d5c3ca3fdb189e33240e48231d865460e13cfa96b801226246ec3bbff1973bb882d2

data/README.md

@@ -14,7 +14,15 @@ AI AgentがPrincipalの代理として何をしてよいかを、委任された
 
 ## Status
 
-> **Implemented and CI verified; Not released.** The Public API, migrations, models, constraints, automatic Audit persistence, and formal test suite are implemented. CI covers Ruby 3.4 / 4.0, Rails 8.0 / 8.1, and PostgreSQL 16. The runnable setup was verified in a new Rails application in [D230](docs/DECISIONS.md#d230-runnable-quick-start-implementation). ActingFor has not been published to RubyGems.
+> **Released: v0.1.0.** ActingFor 0.1.0 is published on [RubyGems](https://rubygems.org/gems/acting_for) and as [GitHub Release v0.1.0](https://github.com/cuichangquan/acting_for/releases/tag/v0.1.0). The Public API, migrations, models, constraints, automatic Audit persistence, and formal test suite are implemented. CI covers Ruby 3.4 / 4.0, Rails 8.0 / 8.1, and PostgreSQL 16.
+>
+> **0.1.1 release candidate:** `Decision#reason_code` is implemented, verified, and under release preparation. The latest published RubyGems version is still `0.1.0`; `0.1.1` has not been published yet.
+
+## ActingFor at a glance
+
+![ActingFor overview: Principal, Delegation, Agent, authorization decisions, AuditEvent, and Rails Host Application](docs/images/acting_for_overview.svg)
+
+The diagram summarizes the v0.1 responsibility boundary: the Host authenticates/resolves the Agent and Principal and establishes trusted business data; ActingFor evaluates the Delegation and returns `allow`, `deny`, or `require_approval`. Approval workflow and business execution remain Host responsibilities.
 
 ## Why ActingFor?
 
@@ -168,19 +176,23 @@ decision = ActingFor.authorize(
   context: { amount: product.price }
 )
 
+decision.status   # => :allow
 decision.allowed? # => true when product.price is 8_900
+
+# ActingFor 0.1.1 release candidate:
+decision.reason_code # => :delegation_allowed
 ```
 
-Both calls use the implemented [v0.1 Public API](docs/public_api_v0_1.md). Context values that affect authorization must be established by the host, not trusted directly from an Agent request.
+The released 0.1.0 behavior is documented in the [v0.1 Public API](docs/public_api_v0_1.md). The [0.1.1 `Decision#reason_code` API note](docs/decision_reason_code.md) documents the new final-reason accessor. Context values that affect authorization must be established by the host, not trusted directly from an Agent request. `reason_code` is not available in the published `0.1.0` gem.
 
 ## Quick Start
 
-ActingFor is not yet published to RubyGems. This pre-release setup installs the public GitHub `main` branch.
+Install the released `0.1.0` gem from RubyGems.
 
 1. Add the Gem and install dependencies:
 
    ```ruby
-   gem "acting_for", github: "cuichangquan/acting_for", branch: "main"
+   gem "acting_for", "~> 0.1.0"
    # Rails 8.0 uses JSON options removed in JSON 3.
    gem "json", "< 3"
    ```
@@ -240,7 +252,7 @@ ActingFor is not yet published to RubyGems. This pre-release setup installs the
    # => [:allow, true, false, false]
    ```
 
-For the complete runnable setup—including a new Rails application, public GitHub pre-release installation, host models, all three `¥8,900 / ¥20,000 / ¥50,000` outcomes, Audit behavior, and production security guidance—see [Getting Started](docs/getting_started.md).
+For the complete runnable setup—including a new Rails application, RubyGems installation, host models, all three `¥8,900 / ¥20,000 / ¥50,000` outcomes, Audit behavior, and production security guidance—see [Getting Started](docs/getting_started.md).
 
 ## How does an external AI Agent reach ActingFor?
 
@@ -446,11 +458,15 @@ ActingFor is not an authentication provider, OAuth/OIDC server, Agent framework,
 Project documents are maintained primarily in Japanese:
 
 - [Getting Started](docs/getting_started.md)
+- [Release Runbook](docs/release_runbook.md)
+- [v0.1.0 Release Process and Verification Record](docs/release_process_v0_1_0.md)
+- [v0.1.0 Release Notes](docs/release_notes_v0_1_0.md)
 - [Current State](docs/CURRENT_STATE.md)
 - [Progress](docs/PROGRESS.md)
 - [Project scope, roadmap, and terminology](docs/PROJECT.md)
 - [Decisions and rationale](docs/DECISIONS.md)
 - [v0.1 Public API](docs/public_api_v0_1.md)
+- [Next-release Decision reason_code API](docs/decision_reason_code.md)
 - [v0.1 Security Model](docs/security_model_v0_1.md)
 - [v0.1 Domain Model](docs/domain_model_v0_1.md)
 - [v0.1 Gem Structure](docs/gem_structure_v0_1.md)

data/app/services/acting_for/internal/authorization.rb

@@ -158,7 +158,7 @@ module ActingFor
             resource_type: resource_type,
             resource_id: resource_id,
             decision: decision_value,
-            reason_code: ActingFor::AuditEvent::DECISION_REASONS.fetch(decision_value),
+            reason_code: decision.reason_code.to_s,
             matched_delegation_ids: matches.map(&:id).sort,
             sanitized_context: sanitized_context
           }

data/lib/acting_for/decision.rb

@@ -1,14 +1,20 @@
 module ActingFor
   class Decision
     STATUSES = %i[allow deny require_approval].freeze
-    private_constant :STATUSES
+    REASON_CODES = {
+      allow: :delegation_allowed,
+      deny: :no_matching_delegation,
+      require_approval: :delegation_requires_approval
+    }.freeze
+    private_constant :STATUSES, :REASON_CODES
 
-    attr_reader :status
+    attr_reader :status, :reason_code
 
     def initialize(status)
       raise ArgumentError, "invalid decision status" unless STATUSES.include?(status)
 
       @status = status
+      @reason_code = REASON_CODES.fetch(status)
       freeze
     end
 

data/lib/acting_for/version.rb

@@ -1,3 +1,3 @@
 module ActingFor
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: acting_for
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - ChangQuan Cui