Skip to content

Synthetic demo · No customer connectors attached · Fixture snapshot 24 Sep 2026, 06:15 UTC

Protect / non-human identity

Access decision simulator

A local demonstration of how a request is evaluated in order. It is not a live enforcement endpoint. Missing or stale evidence yields deny or unknown, never allow.

Observed at 24 Sep 2026, 06:15 UTCStatus as of fixture 24 Sep 2026, 06:15 UTCSample data

Request

Evaluation

Result: DENY
  1. 1. Credential & trust bundleStale

    Trust bundle stale and credential expired; federation cannot vouch for this identity

    Evidence: X.509 chain to federated bundle; URI SAN matches expected SPIFFE ID; Validity window

  2. Remaining steps not evaluated — evaluation stops at the first failing or unknown step.

A passing credential step only authenticates the workload. Authorization is decided by the later policy and data steps.