HIOP Fundamentals

Capability Does Not Equal Authority

Show one call the workstation can name and still will not run without a decision.

Explanation

What you are learning

Capability is what a system is able to call. Authority is the decision that lets that call cause an effect. lab.observe is a real call on the teaching workstation, so the capability is present. The worked example skips the decision and asks the workstation to execute anyway. The result is DENY, dispatch false, executed false, reason bypass refused. A tool list, a function, or a model does not close that gap.

Worked example

Teaching workstation

These fields were returned by the teaching workstation for this lesson. They are not a production permit.

Capability is present. Authority is not

The call lab.observe exists, and the caller skips the decision

outcome
DENY
dispatch
false
executed
false
reason
bypass_refused
effect
lab.observe
actor id
operator
resource
scope-a
request id
bypass-1
Exercise

Try it before you check

Predict the result before you look again. The call is real. The permit is missing.

The caller can name lab.observe and skips the decision. What happens?
Assessment

Explain the result

Which statement is the rule?

This lesson is not complete yet.

Materials

Use these with the lesson

A passed check is saved in this browser so you can resume. It is not a certificate, not an accreditation, and not authority to run an effect.