# docs/03-architecture/word-acl/

Design doc for the word-level ACL (access control) system.

- **[DESIGN.md](DESIGN.md)** — Full design: three ACL dispositions per word
  (`STRICT`, `TTL`, `PINNED`), the four `DictEntry` fields (`acl_ttl`,
  `acl_allow`, `acl_mode`, `acl_pinned`), the two VM flags
  (`emergency_console`, `zuse_session`), and the implementation split between
  C infrastructure and the pure-FORTH policy capsule `capsules/ACL.4th`.
  Status: implemented through Phase 6 on `master`; Phase 7 (LithosAnanke
  parity) is next.

Implementation files referenced by this design: `capsules/ACL.4th`,
`capsules/zuse.4th`, `src/word_source/acl_words.c`,
`src/test_runner/modules/acl_words_test.c`, and the ACL proof set in
`proof/` (`ACL_Pin_Monotone.thy`, `ACL_Inherit_Clears_Pin.thy`,
`ACL_TTL_Bounded.thy`, `ACL_Emergency_Bypass.thy`, `ACL_No_Escalation.thy`).

## See also

- [`proof/README.md`](../../../proof/README.md) — the ACL proof theory files.
- [`capsules/README.md`](../../../capsules/README.md) — capsule files
  including `ACL.4th` and `zuse.4th`.
- [Project root](../../../README.md)