Protect / non-human identity
Access decision simulator
A local demonstration of how a request is evaluated in order. It is not a live enforcement endpoint. Missing or stale evidence yields deny or unknown, never allow.
Observed at 24 Sep 2026, 06:15 UTCStatus as of fixture 24 Sep 2026, 06:15 UTCSample data
Request
Evaluation
Result: DENY
- 1. Credential & trust bundleFail
Credential invalid: Expected warehouse-gateway, got postgres-query-mcp.
Evidence: JWT signature against bundle JWKS; aud claim; exp claim
- Remaining steps not evaluated — evaluation stops at the first failing or unknown step.
A passing credential step only authenticates the workload. Authorization is decided by the later policy and data steps.