oscerd commented on PR #29755: URL: https://github.com/apache/camel/pull/29755#issuecomment-6848638402
Pushed `CAMEL-26846: The Cedar design doc gets a summary, its relation to camel-opa and camel-openfga, the CI and logging rules, and a place in AGENTS.md` (4a3e7e1be288), covering the five points and the Summary thread: 1. **Relation to camel-opa and camel-openfga**: a new section under the component contract says what is kept (the `AuthorizationPolicy` bean that throws `CamelAuthorizationException` with the result left on the exchange for `onException`, outputs cleared on entry, identifiers parsed as data) and what differs: one typed `CamelCedarAuthorizationResult` exchange property instead of the Boolean `CamelOpaDecisionAllow` / `CamelOpenFgaAllowed` headers, and no `failOpen`, because that option (CAMEL-24738 in camel-opa, the same rule in camel-openfga) covers only a decision point that could not be asked, and an embedded engine has none; its failures are configuration errors or per-exchange input and evaluation errors, which strict mode reports as `ERROR`. The `failOpen` sentence in the contract now points to that section. 2. **"shared decision-observation contract when available"**: replaced by the statement that Camel has no such contract today and this component does not introduce one. 3. **CI on ppc64le and s390x**: the verification section says the module sets `skipTests.ppc64le` and `skipTests.s390x` from `components/pom.xml`, as camel-langchain4j-embeddings does, because even parsing an entity type name loads the native library there (confirmed in cedar-java 4.11.0: `EntityTypeName` calls `LibraryLoader.loadLibrary()` in its static initializer). The implementation PR #29746 is getting the same change. 4. **Logging of SDK failures**: the reload rule now lists what a failure report may contain (the failing option, the kind of failure, the exception class, and the policy ids and error kinds of a validation failure) and says SDK messages are neither logged nor retained as causes; the diagnostics section adds that a per-exchange evaluation failure is logged with the exception class only. 5. **AGENTS.md**: `cedar.adoc` is listed under "Read the design docs" as the proposed `camel-cedar`. Also: the `== Summary` section gnodet-bot asked for, and `last-updated` is 2026-11-13. _Claude Code on behalf of oscerd_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
