HIOP Fundamentals

The Authority Chain

Walk one request from the decision to Rain, and stop a locked effect.

Explanation

What you are learning

The chain is the actor, the request, the CRUSHIA decision, and only then Rain. Handle returns the decision and does not execute. Rain may dispatch a fresh PERMIT when the actor, effect, resource, and request still match. In the worked example, lab.observe is permitted and then dispatched once. production.deploy is denied. Rain is not offered that denial. Only a fresh PERMIT may be dispatched.

Worked example

Teaching workstation

These fields were returned by the teaching workstation for this lesson. They are not a production permit.

CRUSHIA returns a fresh PERMIT and does not run it

Handle the request for lab.observe

outcome
PERMIT
dispatch
false
executed
false
reason
fresh_permit_not_yet_dispatched
effect
lab.observe
actor id
operator
resource
scope-a
request id
chain-1
nonce
eeb215329b3c43f7e8d18be45b52a754

Rain runs only that fresh PERMIT

Rain receives the same actor, effect, resource, and request

outcome
PERMIT
dispatch
true
executed
true
effect
lab.observe
actor id
operator
resource
scope-a
request id
chain-1
nonce
eeb215329b3c43f7e8d18be45b52a754
record
teaching workstation
production record
none

A locked effect stays DENY

The same actor asks for production.deploy

outcome
DENY
dispatch
false
executed
false
reason
locked_deny
effect
production.deploy
actor id
operator
resource
release
request id
chain-2
Exercise

Try it before you check

Use the three measured rows. One row decides, one row dispatches, one row denies.

Which row is the one that executes lab.observe?
Assessment

Explain the result

What may Rain dispatch?

This lesson is not complete yet.

Materials

Use these with the lesson

A passed check is saved in this browser so you can resume. It is not a certificate, not an accreditation, and not authority to run an effect.