Problem
The same operation can enter through several channels with different middleware and identity context, creating policy bypasses.
Required work
Define channel-independent authorization contracts and differential tests for equivalent requests.
Acceptance criteria
- Equivalent principals receive equivalent decisions across channels.
- Channel-specific restrictions may only reduce authority.
- Background jobs retain originating identity and policy context.
- Differential fuzzing detects decision divergence.
Problem
The same operation can enter through several channels with different middleware and identity context, creating policy bypasses.
Required work
Define channel-independent authorization contracts and differential tests for equivalent requests.
Acceptance criteria