Skip to main content

Authority

One authority decision taken by Mandate for Commission: the context the host supplies in the commission's authority context, and how each outcome of Mandate's check, and each failure to ask it, maps to Commission's answer. A failure grants nothing.

loom.authority is one of loom's bounded contexts. All domains.

Types​

Answer​

loom.authority.Answer is one of Allow, ApprovalRequired, Deny and Undecided.

CaseResource​

loom.authority.CaseResource is one of Case.

variantresource_typederivationnamespace
Caseloom.caseuuid-v5-of-case-id-bytes735b2acd-620b-43ec-b1ab-144c2aec7ba7

HostContext​

loom.authority.HostContext is a record of one field:

  • verified — Json

MandateHost​

loom.authority.MandateHost is a record of seven fields:

  • verified — Json
  • approver — Uuid
  • approver_policy — Uuid
  • relation — String
  • capabilities — List<String>
  • approval_required — List<String>
  • approval_seconds — Integer

Outcome​

loom.authority.Outcome is one of Allowed, ApprovalRequired, Denied, InvalidCredential, TenantMismatch, AudienceMismatch, StaleEpoch, Unavailable, NoMandateContext, NoMandateResource and Contradictory.

variantanswer
AllowedAllow
ApprovalRequiredApprovalRequired
DeniedDeny
InvalidCredentialDeny
TenantMismatchDeny
AudienceMismatchDeny
StaleEpochDeny
UnavailableUndecided
NoMandateContextUndecided
NoMandateResourceUndecided
ContradictoryUndecided

Five of the types above are reached by nothing else in this system: loom.authority.Answer, loom.authority.CaseResource, loom.authority.HostContext, loom.authority.MandateHost and loom.authority.Outcome. No entity, view, command, event, error or crossing names them, so it is either vocabulary something outside this specification uses or a leftover — and only a person can tell which.


Generated from loom v1 · model digest 687ce3d39bdb34d56d1fe0c221f558534fa9c3e8eda9e34862b5b742d61331e9 · contract digest slice-sha256/2:48ee538abb2ea64fd59379545b1894a1738feb4dc5891e0f833d9681f05a862f. Do not edit this file; change the specification and regenerate it with task docs-generate.