Building block
Controls
Enforce tenancy, permissions, authority, and approvals on every write.
What it is
Controls decide what is allowed. Tenancy isolates records, authority and policy decide what an actor may do, and approvals gate sensitive changes. The decision is made by the backend and enforced on every write.
How it works
How controls works
- 1
Isolate by tenant
Every record is scoped to a tenant and isolated at the data layer.
- 2
Resolve authority
Authority, roles, and policies determine the legal actions for an actor and state.
- 3
Gate with approvals
Sensitive changes require the approvals the policy mandates before they take effect.
Key capabilities
What you get
- Data-layer tenant isolation
- Authority, roles, and policy
- Required approvals on sensitive actions
- Backend-enforced, not UI-inferred
Use it with
Composes with
FAQ
Controls questions
Can the frontend grant itself permissions?
No. The interface renders backend-supplied legal actions and the kernel revalidates every command.