1. Why Auths
Understand the problem with ambient credentials and disconnected policy.
Start here
Auths is a protocol for proof-carrying authorization. A request carries the evidence needed to prove that a specific action is permitted. The receiving service supplies its own trusted context, verifies locally, and executes only the command decoded from the verified action.
2. Mental model
Follow authority from an explicit trust root to an exact action.
3. Quickstart
Call the complete three-input verification operation in Rust.
4. Handle outcomes
Treat authorized, denied, and indeterminate results correctly.
The invariant
Section titled “The invariant”Authority may narrow as it moves through delegation. It never grows. After verification, application code must decode and execute the sealed verified action rather than reuse untrusted request bytes.