Research proof index

Main partial authorization soundness theorem: If partial authorization returns a decision, then concrete authorization will reach the same.

All policies reported as erroring after partial authorization will appear in the set of erroring policies after concrete authorization.

Like partial_authorize_satisfied_permits_not_determining_if_deny for forbid policies, but we can prove a stronger theorem because any satisfied forbid causes the decision to be deny. If the result of concrete authorization is allow, then there can be no satisfied forbid policies after partial authorization.

Like partial_authorize_allow_determining_policies_is_sound for forbid policies, but we can prove a stronger theorem because of forbid_trumps_permit. Any forbid policy satisfied after partial evaluation will always be determining.

If the result of concrete authorization is deny, then any permit policies satisfied after partial authorization cannot be determining policies.

Theorem: TPE.evaluate preserves the typeOf property. If a residual has a certain type, then partially evaluating it produces a residual with the same type.