The third kernel in the trust layer: the constitution gates the action, the injection screen guards the input, and this gates access to a specific resource — "may this subject do this action on this resource in this context?" — from a declarative policy. Same kernel at the edge and here. Edit the request and watch it decide, live.
Honest scope. This is a deterministic ABAC evaluator in the Cedar / OPA family — not a zero-knowledge proof system, and it makes no cryptographic claim. It decides from the attributes you give it; the decision is only as sound as those attributes. It uses deny-overrides and fails closed (a malformed policy or no match → deny). For a verifiable record of a decision, the server endpoint /api/v1/agent/authz returns an ES256-signed attestation you can check against the audit chain. Source: flowdesk-authz-kernel.js · conformance.