1.1 KiB
1.1 KiB
docs/03-architecture/word-acl/
Design doc for the word-level ACL (access control) system.
- DESIGN.md — Full design: three ACL dispositions per word
(
STRICT,TTL,PINNED), the fourDictEntryfields (acl_ttl,acl_allow,acl_mode,acl_pinned), the two VM flags (emergency_console,zuse_session), and the implementation split between C infrastructure and the pure-FORTH policy capsulecapsules/ACL.4th. Status: implemented through Phase 6 onmaster; Phase 7 (LithosAnanke parity) is next.
Implementation files referenced by this design: capsules/ACL.4th,
capsules/zuse.4th, src/word_source/acl_words.c,
src/test_runner/modules/acl_words_test.c, and the ACL proof set in
proof/ (ACL_Pin_Monotone.thy, ACL_Inherit_Clears_Pin.thy,
ACL_TTL_Bounded.thy, ACL_Emergency_Bypass.thy, ACL_No_Escalation.thy).
See also
proof/README.md— the ACL proof theory files.capsules/README.md— capsule files includingACL.4thandzuse.4th.- Project root