Threat model
Review adversaries, trust assumptions, controls, and excluded claims.
Security model
The protected claim is narrow: given explicit trust, a canonical action, and a bounded proof, the verifier establishes whether delegated authority permits that exact action.
Adapter assurance
Understand why supported principal methods do not imply equal assurance.
Canonical corpus
Inspect positive, denied, indeterminate, and malformed vectors.
Fuzzing
See every current fuzz boundary generated from the repository.
Core properties
Section titled “Core properties”- no networking or ambient configuration;
- deterministic, constrained canonical CBOR;
- explicit immutable registries and trust;
- bounded bytes, objects, graph depth, and cryptographic work;
- typed denied and indeterminate outcomes;
- domain-separated signatures and identifiers;
- no public constructor for sealed verified actions; and
- no private-key custody.