Reference scope
The canonical evaluator checks registered predicates and exact material parameters. Delegation may only narrow authority; deterministic failures deny, and semantic review may only escalate.
2AYE Policy / Capability within Authorize
Define explicit limits before an action is proposed.
Bind deterministic rules, typed constraints, approval requirements, and authority expiry to signed intent.
Part of Authorize. This capability guide introduces no separate product, subscription, or universal integration claim.
Integration and verification requirements
Policy simulation is not offered by this guide. New domain constraints require registered typed predicates and documented semantics, rather than generic payload fields or a second evaluator. Production accounting and provider enforcement require deployment evidence.
Use case / Authorization designer
Define resource, expiry and delegation limits before signing.
Illustrative integration review. These controls explain the design; they do not submit requests, grant authority, or execute an action.
Inspect the flow
Stage 1
Define scope
Define resource, expiry and delegation limits before signing.