Skip to content

capability_access.md

Latest commit

 

History

History
38 lines (26 loc) · 1.36 KB

capability_access.md

File metadata and controls

38 lines (26 loc) · 1.36 KB
Raw

capability access

Language: Python · Sphere: programming · Category: Security

Signature: () → None

What it does

Capability-Based Access Control System

This module implements a capability-based access control system where capabilities are unforgeable tokens that grant specific permissions to principals for accessing resources.

Guarantee

When it runs, capability access guarantees live_perms == 3; system.check_access(admin, file1, Permission.READ) is True; system.check_access(admin, file1, Permission.DELETE) is True (proven by run).

Checkable constraints:

  • live_perms == 3
  • system.check_access(admin, file1, Permission.READ) is True
  • system.check_access(admin, file1, Permission.DELETE) is True
  • system.check_access(user1, file2, Permission.READ) is True
  • system.check_access(user1, file2, Permission.WRITE) is False
  • system.check_access(user2, file1, Permission.READ) is False
  • system.check_access(user1, file1, Permission.READ) is False
  • system.check_access(user1, file1, Permission.READ) is True

Verification evidence

  • Green-run: ✓ passes (re-run under the extractor's gate)
  • Constraint strength: recovery (truth-pinned)
  • Independent oracle: — none yet (green-run candidate; not an axiom under the frozen ruler)
  • Peer review: unreviewed

△ AURA Pattern Library — © Reality Optimizer