Menú
Kailash Enterprise (Rust) — RBAC, ABAC, audit trails, multi-tenancy, SSO, policy management.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Kailash Rust security — input validation, secrets, injection prevention. Hardcoded secrets BLOCKED.
Fork canon-incorporation runbook — rebase onto a canon kailash-rs base, re-apply the fork delta (merge-not-replace), SHA-anchored, gated + redteamed, human-gated cutover. Fork-active / canon-noop.
Kailash Rust validation — parameter, DataFlow, connection, workflow, security. Use for code review.
Project Skills (rs variant): cross-cutting patterns spanning Rust crates and PyO3/Magnus/napi-rs bindings. See enterprise-infra-bindings.md, l3-binding-parity.md, and ffi-handle-lifecycle.md.
Kailash DataFlow (Rust) — MANDATORY for DB/CRUD/bulk/migrations via sqlx + ModelDefinition. Raw SQL BLOCKED.
Kailash Nexus (Rust) — MANDATORY for API+CLI+MCP unified deployment. Direct axum/tonic BLOCKED.
| name | enterprise |
| description | Kailash Enterprise (Rust) — RBAC, ABAC, audit trails, multi-tenancy, SSO, policy management. |
Enterprise-grade access control, audit, multi-tenancy, and compliance for the Kailash SDK. Crate: kailash-enterprise.
| Module | Purpose | Key Types | Skill File |
|---|---|---|---|
| RBAC | Role-based access control | Role, Permission, RbacEngine, hierarchical roles, wildcards | enterprise-rbac.md |
| ABAC | Attribute-based access control | Policy, Evaluator, 16 operators, combined evaluation | enterprise-abac.md |
| Audit | Audit trail logging | AuditLog, AuditEntry, tamper-evident, queryable | enterprise-audit.md |
| Tenancy | Multi-tenant isolation | TenantContext, propagation, data isolation | enterprise-tenancy.md |
| SSO | Single sign-on | SAML, OIDC integration patterns | enterprise-sso.md |
| Compliance | Compliance reporting | EATP/CARE report generators, human competency tracking | enterprise-compliance.md |
| Policy | Policy management | Policy engine, rule evaluation | enterprise-policy.md |
| Tokens | Token management | JWT, session tokens, refresh flows | enterprise-tokens.md |
let engine = RbacEngine::new();
engine.add_role("admin", &["read", "write", "delete"]);
engine.add_role("viewer", &["read"]);
engine.check("admin", "write")?; // Ok(true)
let evaluator = AbacEvaluator::new();
evaluator.add_policy(policy);
let decision = evaluator.evaluate(&subject, &resource, &action, &environment)?;
let audit = AuditLog::new();
audit.record(AuditEntry::new("user:123", "document:456", "read"));
let ctx = TenantContext::new("tenant-1");
// All operations within scope are tenant-isolated
skills/10-governance/ -- EATP/CARE governance patterns (trust enforcement)skills/29-pact/ -- PACT organizational governance (D/T/R addressing)enterprise-infra-bindings.md -- Cross-language binding patterns for enterprise types