Expand description
The multi-dimensional authorization scope lattice (SIGNATIF §11).
A trust authority’s scope is a set of independent dimensions —
domain, subdomain, class, instance, identity — each holding
a ScopeValue from a three-level lattice:
Wildcard ⊇ Set { .. } ⊇ Single _Delegation must narrow monotonically: on every dimension the child
value must be a subset of (or equal to) the parent value. Widening
any dimension at any link is a hard verification failure. Unknown
dimensions are carried in extra so schemes can extend the model
without breaking verifiers that do not recognize the extension; a
dimension absent from the parent is treated as unconstrained.
Structs§
- Scope
Dimensions - A multi-dimensional scope: the five named SIGNATIF dimensions plus an extension map for scheme-registered dimensions.
Enums§
- Scope
Value - One dimension’s value in the scope lattice. The default is
ScopeValue::Wildcard: an unconstrained dimension.