Security Cockpit

Principal (JSON) { "id": "op-bob", "roles": ["role_B"], "clearance": "confidential" } Facts (JSON array) [ {"id":"open","kind":"fact","classification":"unclassified"}, {"id":"secret-1","kind":"fact","classification":"secret"}, {"id":"role-gated","kind":"fact","permitted_roles":["role_INTEL"]} ] ▸ Evaluate

Ruleset (JSON) { "version": "ops-v1", "rules": [ { "name": "block-large-transfer", "match": { "all": [ {"field":"action.type","op":"eq","value":"transfer"}, {"field":"action.amount","op":"gt","value":10000000} ]}, "verdict": "deny", "reason": "amount exceeds $10M ceiling" }, { "name": "review-sanctioned-country", "match": { "all": [ {"field":"target.country","op":"in","value":["IR","KP","RU"]} ]}, "verdict": "review", "reason": "sanctioned-jurisdiction touch" } ] } ▸ Install

Context (JSON) { "action": {"type":"transfer","amount":15000000}, "target": {"country":"IR"}, "principal": {"id":"agent-tax","roles":["agent"]} } Version ▸ Evaluate

Sup-join inputs (JSON array) [ {"input_id":"x","label":"secret"}, {"input_id":"y","label":"unclassified"} ] Output ID ▸ Propagate

Declassification request { "output_id": "derived-A", "from_label": "secret", "to_label": "confidential", "operator": "op-alice", "justification": "source disclosure cleared by legal 2026-05-17" } ▸ Record