Authorization is enforcement
Policies that don't control execution are not enforcement.
Fail-closed execution model · receipts verifiable offline.
SYSTEM
Enforcement model
Deterministic PERMIT, DENY, or SILENCE before execution.
Understand the control model →Decision receipts
Cryptographic proof of each binding decision.
Verify receipts →
Arbiter and Gate
Policy definition and authorization on the hot path.
Explore products →Cluster
Execution governance, deterministic authorization, fail-closed defaults.
Explore cluster →PROOF
{
"decision": "DENY",
"surface": "payment.transfer",
"reason": "limit_exceeded",
"timestamp": "2026-05-04T12:00:00Z",
"signature": "base64:…"
}