Security & governance

This section covers identity, permissions, policy, traceability, and controlled operational change.

OpenFoundry mapping

• services/auth-service
• services/audit-service
• gateway auth and audit middleware
• policy and RBAC contracts in proto/auth/*
• security-oriented smoke and workflow assumptions

Key concerns

• authentication and authorization
• role and policy models
• auditability
• semantic access control
• environment and deployment governance

Section map

• Identity and access
• Policies and authorization
• Restricted views and data controls
• Audit and traceability
• ABAC and CBAC model
• Policy evaluation flows
• Audit model