بنقرة واحدة
enterprise
Kailash Enterprise (Rust) — RBAC, ABAC, audit trails, multi-tenancy, SSO, policy management.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
القائمة
Kailash Enterprise (Rust) — RBAC, ABAC, audit trails, multi-tenancy, SSO, policy management.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Kailash Rust security — input validation, secrets, injection prevention. Hardcoded secrets BLOCKED.
Fork canon-incorporation runbook — rebase onto a canon kailash-rs base, re-apply the fork delta (merge-not-replace), SHA-anchored, gated + redteamed, human-gated cutover. Fork-active / canon-noop.
Kailash Rust validation — parameter, DataFlow, connection, workflow, security. Use for code review.
Project Skills (rs variant): cross-cutting patterns spanning Rust crates and PyO3/Magnus/napi-rs bindings. See enterprise-infra-bindings.md, l3-binding-parity.md, and ffi-handle-lifecycle.md.
Kailash DataFlow (Rust) — MANDATORY for DB/CRUD/bulk/migrations via sqlx + ModelDefinition. Raw SQL BLOCKED.
Kailash Nexus (Rust) — MANDATORY for API+CLI+MCP unified deployment. Direct axum/tonic BLOCKED.
| name | enterprise |
| description | Kailash Enterprise (Rust) — RBAC, ABAC, audit trails, multi-tenancy, SSO, policy management. |
Enterprise-grade access control, audit, multi-tenancy, and compliance for the Kailash SDK. Crate: kailash-enterprise.
| Module | Purpose | Key Types | Skill File |
|---|---|---|---|
| RBAC | Role-based access control | Role, Permission, RbacEngine, hierarchical roles, wildcards | enterprise-rbac.md |
| ABAC | Attribute-based access control | Policy, Evaluator, 16 operators, combined evaluation | enterprise-abac.md |
| Audit | Audit trail logging | AuditLog, AuditEntry, tamper-evident, queryable | enterprise-audit.md |
| Tenancy | Multi-tenant isolation | TenantContext, propagation, data isolation | enterprise-tenancy.md |
| SSO | Single sign-on | SAML, OIDC integration patterns | enterprise-sso.md |
| Compliance | Compliance reporting | EATP/CARE report generators, human competency tracking | enterprise-compliance.md |
| Policy | Policy management | Policy engine, rule evaluation | enterprise-policy.md |
| Tokens | Token management | JWT, session tokens, refresh flows | enterprise-tokens.md |
let engine = RbacEngine::new();
engine.add_role("admin", &["read", "write", "delete"]);
engine.add_role("viewer", &["read"]);
engine.check("admin", "write")?; // Ok(true)
let evaluator = AbacEvaluator::new();
evaluator.add_policy(policy);
let decision = evaluator.evaluate(&subject, &resource, &action, &environment)?;
let audit = AuditLog::new();
audit.record(AuditEntry::new("user:123", "document:456", "read"));
let ctx = TenantContext::new("tenant-1");
// All operations within scope are tenant-isolated
skills/10-governance/ -- EATP/CARE governance patterns (trust enforcement)skills/29-pact/ -- PACT organizational governance (D/T/R addressing)enterprise-infra-bindings.md -- Cross-language binding patterns for enterprise types