Open Source · Evidence model
Permission and outcome are different facts.
RuleOak records evidence in layers so an allow decision is not mistaken for proof that an external effect occurred.
Action identityNormalized operation/resource.
AuthorityPolicy, approval, revocation and constraints.
ExecutionLeaseOne-use authority for the reviewed action.
EffectReceiptWhat the boundary observed about execution/effect state.
Effect ProfileReviewed postcondition semantics when available.
Retry dispositionDo not retry, fresh-authority retry, or verify first.
Flight RecorderRedacted local evidence chain.
Common category errors
- An allow decision is not execution proof.
- An execution lease is not effect proof.
- A successful transport response is not automatically the business postcondition.
- A discovered capability is not permission.
- A model explanation is not effect evidence.
Useful operator questions
What was proposed? What was authorized? What was attempted? What was observed? What is independently verified? What remains unresolved?