The TAL decision function. Pure and deterministic: same bundle and request
always produce the same decision, so every decision can be replayed and
checked against a golden record.
Semantics: default deny. A flow is allowed only when a fresh or stale (not
expired) signed policy contains an explicit rule matching source role,
destination role, operation, traffic class, initiator, time window and, where
required, the enumerated source id. Signature verification happens before a
bundle is admitted to the edge (see verifyBundle), never inside this function.
The TAL decision function. Pure and deterministic: same bundle and request always produce the same decision, so every decision can be replayed and checked against a golden record.
Semantics: default deny. A flow is allowed only when a fresh or stale (not expired) signed policy contains an explicit rule matching source role, destination role, operation, traffic class, initiator, time window and, where required, the enumerated source id. Signature verification happens before a bundle is admitted to the edge (see verifyBundle), never inside this function.