Architecture document · Draft
Authorization Handshake
Draft
Draft document. This page is unverified, is not indexed by search engines, and may change without notice. It describes a design target, not deployed capability.
Status
CANONICAL TARGETScope
The exchange in which a principal presents an intent and Vallum establishes that legitimate, scoped authority exists for it.
- Authority traces to a human grant. A principal cannot assert or expand its own authority within the handshake.
- Scope is explicit: the target, the operation, and the conditions are named, not inferred.
- The handshake produces an authorization record that later stages reference by identity rather than by trust.
Evidence required before this label can change
A qualified implementation with preserved assurance evidence, reviewed under the canonical contract for this component. Until that evidence exists, this document remains a design target.