code wiki / _hdl_build / nx_vault_acl.nx
nx_vault_acl.nx
buildroot/runtime/_hdl_build/nx_vault_acl.nx
about
nx_vault_acl.nx -- sovereign path-based ACL POLICY engine (HashiCorp Vault "policies + identity" gap from
vault_capability_census.tsv). A policy is a set of rules (path-prefix -> capabilities, or an explicit
deny). Evaluation is DENY-BY-DEFAULT, EXPLICIT-DENY-WINS, and LONGEST-PREFIX-grant -- the three rules that
make least-privilege actually hold. Pure logic over caller-supplied rule arrays. license_tier: ORIGINAL
dependencies 1 imports · 5 importers
imports: nx_syscalls.nx
imported by: nx_access_wall.nxnx_authz.nxnx_vault_acl_test.nxnx_vault_auth_test.nxnx_vault_suite_test.nx
structs
| none |
consts
| 7 | const CAP_READ: i64 = 1 |
| 8 | const CAP_WRITE: i64 = 2 |
| 9 | const CAP_LIST: i64 = 4 |
| 10 | const CAP_DELETE: i64 = 8 |
functions
| 13 | func acl_is_prefix(p: *u8, pl: i64, q: *u8, ql: i64) -> i64 |
| 23 | func acl_eval(paths: *i64, lens: *i64, deny: *i64, caps: *i64, nrules: i64, req: *u8, req_len: i64, req_cap: i64) -> i64 |