Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Theorem Catalog

33 proved · 0 sorry · 33 total

Condition Key Evaluation (IamExplainer.Condition)

StatusNameDescription
🟢 provedevalCond_noContext_T_imp
🟢 provedevalCond_noContext_tu

SCPs, Permission Boundaries, and RCPs (IamExplainer.Layers)

StatusNameDescription
🟢 provedevalLayers_blocked_noContext_empty
🟢 provedevalLayers_noLayers_blocked

End-to-End IAM Authorization Proofs (IamExplainer.Proofs)

StatusNameDescription
🟢 provedallows_nocontext_conservative
🟢 provedallows_replaceAllow_mono
🟢 provedallows_replace_stmt_monoGeneralized statement replacement mono
🟢 provedemitFixed_narrows
🟢 provedgrants_completeGrants completeness and no-context conservatism
🟢 provedlayer_add_monotone
🟢 provedlayered_nocontext_conservative
🟢 provedlayers_narrowLayer theorems: layered evaluation only narrows access.
🟢 provedmatchPattern_ci_congr
🟢 provednarrowActions_narrows
🟢 provednarrowResources_narrowsNEW: narrowResources_narrows (T3)
🟢 provedremoveAllow_narrows
🟢 provedstmtGrantsAction_ci_congr
🟢 provedstmtGrantsAction_narrow

Policy Evaluation Semantics (Seclib.Domain.PolicySem)

StatusNameDescription
🟢 provedfilterMap_narrows
🟢 provedgrants_completegrants_complete: if allowed, an Allow statement exists that matches
🟢 provednarrow_narrowsnarrow_narrows: replacing a statement with one that matches fewer requests narro
🟢 provednocontext_conservativenocontext_conservative: if allowed under any context, allowed under noCtx
🟢 provedremoveAllowremoveAllow: removing an Allow statement narrows access

Action and Resource Pattern Matching (Seclib.Prim.Glob)

StatusNameDescription
🟢 provedciEq_toLowerStr
🟢 provedmatchPatternGo_literal_eq
🟢 provedmatchPattern_cs_literal_eq
🟢 provedmatchPattern_literal_mp
🟢 provedtoLower_eq_question
🟢 provedtoLower_eq_star

Statement Combining — Deny Overrides (Seclib.Prim.Rule)

StatusNameDescription
🟢 provedappliesOf_unknown_conservativeLemma 4: Unknown applicability is conservative
🟢 provedconj_narrowsLemma 3: Conjunction of evaluation gates never widens access
🟢 proveddenyOverrides_add_deny_narrowsLemma 2: Adding a deny narrows
🟢 proveddenyOverrides_remove_allow_narrowsLemma 1: Removing an allow rule narrows access