@atlasauth/pca-explain 0.3.0 → 0.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -14,6 +14,11 @@ Depends on `@atlasauth/pca`.
|
|
|
14
14
|
|
|
15
15
|
## Usage
|
|
16
16
|
|
|
17
|
+
The explainer reads the structural core verdict (`verifyPCActnCore`'s per-check map) to say which check failed and how to
|
|
18
|
+
fix it. It explains; it does not authorize: the allow / deny decision belongs to the full server verifier (`verifyPCActn` /
|
|
19
|
+
`requirePCA`, with the grant from your own store).
|
|
20
|
+
|
|
21
|
+
<!-- pca-core-verify: allow the structural verdict feeds the explainer; the authorization decision is verifyPCActn / requirePCA -->
|
|
17
22
|
```ts
|
|
18
23
|
import { explainVerification, explainChain } from '@atlasauth/pca-explain';
|
|
19
24
|
import { verifyPCActnCore } from '@atlasauth/pca';
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atlasauth/pca-explain",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.4.1",
|
|
4
4
|
"description": "Plain-language proof-trace for PCA decisions: given a PCActn and its verify/decide result, explain exactly why it was allowed or denied — which capability granted it, which caveat narrowed or failed, the risk/threshold/budget path, and the first failing check with a remedy.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"explainability",
|
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
"./package.json": "./package.json"
|
|
32
32
|
},
|
|
33
33
|
"dependencies": {
|
|
34
|
-
"@atlasauth/pca": "0.
|
|
34
|
+
"@atlasauth/pca": "0.4.1"
|
|
35
35
|
},
|
|
36
36
|
"devDependencies": {
|
|
37
37
|
"typescript": "^5.6.3",
|