Interface: AuthzCheckResponse
@kortexya/reasoninglayer / AuthzCheckResponse
Interface: AuthzCheckResponse
Section titled “Interface: AuthzCheckResponse”Defined in: src/types/authz.ts:290
The decision of POST /api/v1/authz/check, with its witnesses.
Remarks
Section titled “Remarks”The check is a closed-world backward-chain proof of the can goal, so a
grant derived through a has_role rule proves out as well as a literal
tuple. One witness per proof.
Properties
Section titled “Properties”allowed
Section titled “allowed”allowed:
boolean
Defined in: src/types/authz.ts:292
Whether at least one proof of the can goal was found.
decisionTime
Section titled “decisionTime”decisionTime:
string
Defined in: src/types/authz.ts:298
The instant the decision was made at (RFC 3339).
derivationComplete?
Section titled “derivationComplete?”
optionalderivationComplete?:boolean
Defined in: src/types/authz.ts:307
Whether every derivation completed.
Remarks
Section titled “Remarks”false with allowed: false means “not established”, not “refuted”: a
bounded search found no proof, which is not a denial certificate. Absent
when the engine did not report it.
witnessCount
Section titled “witnessCount”witnessCount:
number
Defined in: src/types/authz.ts:294
Number of distinct proofs (0 means denied).
witnesses
Section titled “witnesses”witnesses:
string[]
Defined in: src/types/authz.ts:296
A short human-readable display per proof (e.g. certainty=1.000).