WEBVTT

1
00:00:00.000 --> 00:00:01.581
The Authority Chain.

2
00:00:01.581 --> 00:00:07.241
Walk one request from the decision to Rain, and stop a locked effect.

3
00:00:07.241 --> 00:00:13.113
The chain is the actor, the request, the CRUSHIA decision, and only then Rain.

4
00:00:13.113 --> 00:00:16.773
Handle returns the decision and does not execute.

5
00:00:16.773 --> 00:00:23.635
Rain may dispatch a fresh PERMIT when the actor, effect, resource, and request still match.

6
00:00:23.635 --> 00:00:29.125
In the worked example, lab.observe is permitted and then dispatched once.

7
00:00:29.125 --> 00:00:31.184
production.deploy is denied.

8
00:00:31.184 --> 00:00:33.547
Rain is not offered that denial.

9
00:00:33.547 --> 00:00:36.369
Only a fresh PERMIT may be dispatched.

10
00:00:36.369 --> 00:00:40.408
Here is the measured teaching-workstation run.

11
00:00:40.408 --> 00:00:43.459
Handle the request for lab.observe.

12
00:00:43.459 --> 00:00:44.716
Outcome PERMIT.

13
00:00:44.716 --> 00:00:46.242
Dispatch is false.

14
00:00:46.242 --> 00:00:47.768
Executed is false.

15
00:00:47.768 --> 00:00:51.807
The reason is fresh permit not yet dispatched.

16
00:00:51.807 --> 00:00:54.589
The teaching nonce is on screen.

17
00:00:54.589 --> 00:00:59.885
Rain receives the same actor, effect, resource, and request.

18
00:00:59.885 --> 00:01:01.142
Outcome PERMIT.

19
00:01:01.142 --> 00:01:02.578
Dispatch is true.

20
00:01:02.578 --> 00:01:04.014
Executed is true.

21
00:01:04.014 --> 00:01:06.796
The teaching nonce is on screen.

22
00:01:06.796 --> 00:01:10.476
The same actor asks for production.deploy.

23
00:01:10.476 --> 00:01:11.553
Outcome DENY.

24
00:01:11.553 --> 00:01:13.079
Dispatch is false.

25
00:01:13.079 --> 00:01:14.605
Executed is false.

26
00:01:14.605 --> 00:01:16.849
The reason is locked deny.