Policy & authorization
Declarative rules. Sub-millisecond decisions.
Evaluates SPL policies with default-deny semantics. Nothing executes without an explicit ALLOW.
- Sovaria Policy Language (SPL)
- Per-user and per-IP rate limits
- Storage, API and bandwidth quotas
- Policy hot-reload
Sovaria Policy Language compiles to a decision tree at deploy time. Every request gets an explicit ALLOW or DENY.
SPL language
Human-readable rules for read, write, delete, and execute.
Compiled VM
Policies compile once — evaluation is sub-millisecond.
Preflight checks
sdk.policy.preflight() before mutating calls.
Rollback support
Policy history and version rollback via Guard API.
Each part below is a real component of Guard. Point at one to see what it connects to, or trace a request through it.
Axis
Axis resolves sessions into a signed ContextManifest — user, org, project, roles — before any engine runs.
Echo
Echo replays the execution graph in-memory. Policy checks, diffs, and cost estimates — zero side effects.
Atlas Doc + Rel
Atlas Doc stores hierarchical JSON with LSM-tree internals. Atlas Rel runs ACID SQL with MVCC — same Guard policies on both.