Partial evaluate policy is sound
Cedar.Thm.partial_evaluate_policy_is_sound
Plain-language statement
Policy evaluation soundness for TPE: Evaluating a result residual is equivalent to evaluating the input policy, given valid and consistent requests and entities. The equivalence is w.r.t authorization results. That is, the evaluation results are strictly equal when they are .ok or both errors (captured by Except.toOption). We do not care if the error...
Source project: Cedar Specification
Person-level attribution pending.