Attribute-based access control: Policy model

Defines actors, resources, actions, rules, inheritance, defaults, and denial behavior for attribute-based access control. It fixes adoption boundaries and observable failure evidence while keeping environment-specific limits configurable.

Published Sep 12, 2026