Access Control
Principal model + federation entrypoints + Cedar ABAC + per-Org markings. Role-derived permissions, entity scope restrictions, hash-chained audit logging, Ed25519 signing, and encrypted secret storage.
Auth Flow
graph TD
REQ["Action Request"] --> CTX["AuthProvider.context_for(principal)"]
CTX --> ROLE["Role.default_permissions()"]
ROLE --> GRP["Group overrides applied"]
GRP --> USR["User overrides applied"]
USR --> AC["AuthContext"]
AC --> PERM{"require(Permission)?"}
PERM -->|Allowed| ENT{"require_entity()?"}
ENT -->|Allowed| OK["✓ Proceed"]
PERM -->|Denied| ERR["✗ PermissionDenied"]
ENT -->|Denied| ERR
Questions?
Reach out for help with integration, deployment, or custom domain codecs.