Skip to content

decern v0.1.0

Choose a tag to compare

View all tags
@anivar anivar released this 02 Aug 10:12
v0.1.0
849a694

First release.

A deterministic authorization kernel for agents, people, and services — all one kind of principal, answered by the same function. Nine safety invariants are machine-checked by cvc5 over every case the model allows; every decision is recorded in a tamper-evident, hash-chained ledger anyone can verify offline.

Binaries

Prebuilt decern (prove · decide · verify) and decern-serve (fail-closed PDP) for:

  • Linux x86_64 — static musl
  • Linux aarch64 — static musl
  • macOS Apple Silicon (aarch64)
  • Windows x86_64

Unpack the archive for your platform and put both binaries on your PATH.

Intel macOS: build from source — cargo install decern-cli decern-server.

Verify a download:

shasum -a 256 -c SHA256SUMS

What "proven" means

cvc5 proves the kernel's nine invariants — not that a given policy says what you meant, and never that a deployment is secure. See the repository's "known limitations".

Apache-2.0.

Assets 7
Loading