TDL-01 / DETERMINISTIC DELEGATED-AUTHORITY ATTENUATION, REVOCATION FRESHNESS & TRANSITIVE-PRIVILEGE/REPLAY REJECTION COURT

Link every delegate.
Attenuate every capability.
Reject transitive privilege.

Delegation inherits the complete edge chain through TAC-01, binds every child grant to its parent issuer, audience, tenant and resource, proves capability attenuation, depth and revocation freshness, and quarantines expansion, escape and replay.

01OBSERVE
02INHERIT
03LINK
04ATTENUATE
05BOUND
06AGE
07CHALLENGE
08QUARANTINE
09REPLAY
10SEAL
0102030405
FIVE DELEGATION PROFILES
ONE ATTENUATION COURT
01 / DELEGATED-AUTHORITY WORLDSLINK + ATTENUATE + REJECT

Bound delegation proved.
Expansion, escape and replay quarantined.

DECLARED BOUNDS
ISSUER LINKEDAUDIENCE BOUNDTENANT CONFINEDSCOPES ATTENUATED0 GRANTS ISSUED0 RESOURCES TOUCHED
02 / DELEGATION ASSURANCEAWAITING STATE
COURT DECISION

ATTENUATE AUTHORITY. HONOR REVOCATION. REJECT TRANSITIVE ESCAPE.

Access inheritance, issuer linkage, audience, tenant, resource, capability subset, depth, freshness and nonce uniqueness receive separate deterministic findings without issuing a live grant.

01EDGE CHAINWAIT
02ACCESSWAIT
03ISSUERWAIT
04AUDIENCEWAIT
05TENANTWAIT
06RESOURCEWAIT
07ATTENUATIONWAIT
08DEPTHWAIT
09FRESHNESSWAIT
10REPLAYWAIT
11ASSURANCEWAIT
12EXPOSUREWAIT
DELEGATION RECEIPTTDL-01AWAITING-EVIDENCE
ACCESS / TAC-01SESSION / TSS-01GRANT AUTHORITY / FALSE