aps_capability_evaluate_authority
Evaluate authority to permit or deny access by verifying a subject's signed request, delegation chain, and authority-token preimage against a sink challenge.
Instructions
v0.1 capability-token authority evaluation request (M2). Subject signs a request carrying the sink's M1, the delegation chain, and a revealed authority-token preimage. The gateway consumes this to decide permit/deny. Search keywords: capability token, authority evaluation, M2.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| challenge | No | SinkChallenge object from M1 | |
| delegation_chain | Yes | v2.x delegation envelopes | |
| authority_token | Yes | ||
| freshness_beacon | Yes | ||
| subject_private_key | Yes | Subject Ed25519 private key (hex) | |
| subject_public_key | Yes | Subject Ed25519 public key (hex) | |
| delegation_chain_root | No | Override; otherwise computed from chain |