SAFR whitepaperpp. 9–10
Controls Repository
The institution's configurable rulebook of controls drawn from policy, regulation, product rules, and mandates.
Mandate
A machine-readable delegation of authority from a user to an agent, defining what it may do and within what limits.
A mandate is the machine-readable record of the authority a user delegates to an agent: what it may do, within what limits, under what conditions. It follows the capability-based security model, in which authority is held in a bounded token. The agent can't widen a mandate through its own reasoning.
Topics
Related terms
SAFR whitepaperp. 8
Context Metadata
Agent identity, applicable mandate, account or system state, and policy constraints attached to an envelope.