premises

Documentation

Overview

Package premises is the reason-as-evidence profile: a hand states the premises of an action as a ProveML certificate, the gateway verifies it against a snapshot, a registry and a provenance map before the grant is consulted, and the digests ride in the token as the profile's seven claims. The certificate language is ProveML through proveml-go; another language would be another implementation of Checker.

Index

• func Check(m *Material)
• func Claims(m *Material) (map[string]any, error)
• func Replay(claims map[string]any, m Material) error
• type Material

Functions

func Check

func Check(m *Material)

Check verifies the material and fills Verified and Errors: every construct verified by the ProveML judge in certificate coverage, every required control argued by at least one judgement, every bound fact at the grade the policy requires.

func Claims

func Claims(m *Material) (map[string]any, error)

Claims are the profile's seven claims for the token's extension point.

func Replay

func Replay(claims map[string]any, m Material) error

Replay recomputes the digests and the check from stored material and compares both with what a record claims.

Types

type Material

type Material struct {
	Certificate      string            `json:"certificate"`
	Store            map[string]any    `json:"store"`
	Registry         proveml.Registry  `json:"registry"`
	Provenance       map[string]string `json:"provenance"`
	RequiredControls []string          `json:"requiredControls"`
	RequiredGrades   map[string]string `json:"requiredGrades"`
	Verified         bool              `json:"verified"`
	Errors           []string          `json:"errors"`
}

Material is what the digests cover, supplied by the hand and kept beside the record.