POLICY
Define the rule, risk boundary and authority source.
SnapSpace keeps policy, decision, authority, execution, interruption, effect truth and reconciliation separate so one stage cannot silently impersonate another.
Define the rule, risk boundary and authority source.
Make the rule executable at the point where action can occur.
Return ALLOW / DENY / ESCALATE against current state and authority.
Bind the exact principal, action, material, state, scope and expiry.
Use stable attempt identity and refuse stale, rebound or duplicate work.
Interrupt active consequential work through a separate authenticated path.
Keep acknowledgement, effect and responsibility transfer distinct.
Resolve UNKNOWN_EFFECT without blind retry or invented success.
Preserve the exact chain of what was authorised, attempted, applied and resolved.
Only ALLOW can create a bounded grant. DENY creates no authority. ESCALATE means the current authority cannot safely decide.
STOP revokes remaining authority in scope and contains further effects where technically possible. It is not rollback and not a fourth normal verdict.
Independent domains may exchange purpose-, freshness- and provenance-bound state. The receiving domain still makes its own admission decision and creates its own authority.