Post-Authorization Control

🚫 PCR Engine

Can in-flight actions be interrupted before they cross the irreversibility boundary?

The CLV heartbeat catches drift periodically. The PCR push channel interrupts execution in real time. Between heartbeat intervals, conditions can change but in-flight actions continue executing against a stale authority state. PCR closes that gap.

Four Components

PolicyChangeEmitter

Watches the policy store for mutations. When a policy hash changes, it triggers invalidation of all active gate tokens bound to that policy.

InvalidationBus

Event-driven signal routing. Identifies all active gate tokens affected by a policy change and invalidates them in a single operation.

GateGuard

Sits at each commit boundary within an execution. Before any internal state transition, GateGuard checks the token state. If invalidated by a push signal, execution halts.

RevocationLedger

Records all push revocations on-chain. In-flight revocations (where execution was actively interrupted) are flagged separately.

The heartbeat catches drift. The push channel interrupts execution. Both land on-chain. Gate token state transitions are forward-only: ACTIVE → INVALIDATED / EXPIRED / CONSUMED. No regression.

← Back to Stack See Demo →