25 lines
1.1 KiB
Markdown
25 lines
1.1 KiB
Markdown
# docs/03-architecture/word-acl/
|
|
|
|
Design doc for the word-level ACL (access control) system.
|
|
|
|
- **[DESIGN.md](DESIGN.md)** — Full design: three ACL dispositions per word
|
|
(`STRICT`, `TTL`, `PINNED`), the four `DictEntry` fields (`acl_ttl`,
|
|
`acl_allow`, `acl_mode`, `acl_pinned`), the two VM flags
|
|
(`emergency_console`, `zuse_session`), and the implementation split between
|
|
C infrastructure and the pure-FORTH policy capsule `capsules/ACL.4th`.
|
|
Status: implemented through Phase 6 on `master`; Phase 7 (LithosAnanke
|
|
parity) is next.
|
|
|
|
Implementation files referenced by this design: `capsules/ACL.4th`,
|
|
`capsules/zuse.4th`, `src/word_source/acl_words.c`,
|
|
`src/test_runner/modules/acl_words_test.c`, and the ACL proof set in
|
|
`proof/` (`ACL_Pin_Monotone.thy`, `ACL_Inherit_Clears_Pin.thy`,
|
|
`ACL_TTL_Bounded.thy`, `ACL_Emergency_Bypass.thy`, `ACL_No_Escalation.thy`).
|
|
|
|
## See also
|
|
|
|
- [`proof/README.md`](../../../proof/README.md) — the ACL proof theory files.
|
|
- [`capsules/README.md`](../../../capsules/README.md) — capsule files
|
|
including `ACL.4th` and `zuse.4th`.
|
|
- [Project root](../../../README.md)
|