2 Commits

Author	SHA1	Message	Date
John Dvorak	8f863275c2	js-rigor: fix binary mode dropping partial graphs; binary-partial parity campaign ... The binary branch of AuthorizationChecker.check rebuilt its options with a fixed six-field object, silently discarding partialGraphContext (and any other caller option) — binary checks denied grants the normal path allowed. Now spreads all caller options through. binary-partial-parity pins: partial grants above the threshold allow, below deny, persistent wins over partial, and binary decisions agree with normal decisions on the same overlay.	2026-07-31 15:31:34 -07:00
John Dvorak	717ae1031e	initial commit: @arbiter/core authorization engine with js-rigor hardening ... Zanzibar-style authorization graph engine (direct/chain/TTU/defeasible/ binary modes, condensed snapshots, value relations) with 39 rigor test campaigns. Includes fixes for snapshot binary writer/reader format mismatch (snapshot-of-snapshot corruption), possibility write-boundary validation, empty-graph snapshot serialization, relation lookup cache direction collision, config-redefinition cache invalidation, binary threshold semantics, defeasible compiled routing, and comparator reason whitelisting.	2026-07-31 13:44:06 -07:00