Guard / foldkit-guard
What it owns, and what it does not
| Fact | Owner |
|---|---|
| Who is asking | your authentication, which provides it as G.Principal |
| Who may do what | the guard set: declared once, in the shared domain code |
| A principal guard's body | G.implement, on the server only |
| Which rows a read returns | each binding's visible, compiled from the rules |
| Enforcement | each seam of foldkit-remote-server, -drizzle and foldkit-sync, through this package's subpaths |
| What a client shows as allowed | the server's may answer; no rule runs on a client |
It does not authenticate, and it does not trust the client: a hint the client
reads (may) is the server's answer, and the server checks every write
again when it is made.