delegated 0.2.0

Minimal fail-closed capability-token evaluation core
Documentation
1
2
3
4
5
6
7
8
9
10
11
# Security policy

Report vulnerabilities privately through the repository's GitHub security advisory feature.

## Boundary

Delegated verifies issuer-signed bearer capabilities against explicit host configuration. Security
depends on issuer-key custody, trustworthy `OperationContext` construction, atomic shared replay
state, durable audit handling, short token lifetimes, and secure transport.

The library does not authenticate the bearer or establish that a user is currently present.