Certification

Control contract

Attach versioned policy and evaluation evidence to an approved capability boundary.

• Verify signature, tenant, principal, expiry, and revocation.
• Grant only exact permissions.
• Fail closed when required evidence is unavailable.
• Retain the decision context for investigation.

Availability