giles
fe47334e52
Some checks failed
Test, Build, and Deploy / test-build-deploy (push) Failing after 56s
Datalog ACL layer (schema/facts/engine/api) over lib/datalog/. Direct grant permits unless explicit deny names same (S,A,R) — deny-overrides via stratified negation. Conformance wrapper + scoreboard. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
14 lines
544 B
Plaintext
14 lines
544 B
Plaintext
;; lib/acl/facts.sx — EDB fact constructors.
|
|
;;
|
|
;; Each constructor returns a Datalog fact tuple (a list whose head is the
|
|
;; predicate symbol). These are the only shapes lib/acl/engine.sx feeds to
|
|
;; lib/datalog/. Phase 1 covers actor/resource/grant/deny.
|
|
|
|
(define acl-actor (fn (id kind) (list (quote actor) id kind)))
|
|
|
|
(define acl-resource-fact (fn (id kind) (list (quote resource) id kind)))
|
|
|
|
(define acl-grant (fn (subj act res) (list (quote grant) subj act res)))
|
|
|
|
(define acl-deny (fn (subj act res) (list (quote deny) subj act res)))
|