HOW IT WORKS
Follow a protected request.
Explore an illustrative decision flow. These scenarios explain the intended design; they do not run a protocol or report test results.
INSPECT THE DECISION
Same boundary. Different outcomes.
CONCEPTUAL WALKTHROUGH
Request → proof → authority → decision
PERMIT / Valid proof + fresh context + explicit action permission.
The protected action proceeds only within the permissions defined by the integration.
THE LIFECYCLE
Four steps, with defined failure behaviour.
01
Bind
Establish the device and session authority.
02
Dual-sign
Define the signature profile and signed request context.
03
Verify
Check proof, freshness and action permissions.
04
Self-heal
Contain within policy. Recover through an authorised path. Retain evidence.
START WITH THE SESSION
See the session lifecycle under test.
Explore the boundary. Inspect the decision. Trace the recovery.