Skip to content

Type Alias: AuthzEffect

@kortexya/reasoninglayer


@kortexya/reasoninglayer / Authz / AuthzEffect

Type Alias: AuthzEffect

AuthzEffect = "allow" | "deny"

Defined in: src/types/authz.ts:34

The effect every enforcement locus would apply to an access.

Remarks

The policy engine is fail-closed: anything that is not an explicit allow is a deny. The SDK preserves that posture when narrowing the wire value — an effect the SDK does not recognize is surfaced as deny, never allow.

Example

if (response.effect === 'deny') {
throw new Error('access refused');
}