The full trust check

Every read behind the answer.

The same check as the live demo, step by step. Each row says whether it was read from the tenant, worked out here, or declared by the estate.

8 Agents, Raidiam Connect, 4 Resources Records Assistant, Tarnbrook Financial Group Balance Monitor, Tarnbrook Financial Group Balance Monitor, Quillon Software Batch Reviewer, Tarnbrook Financial Group Analyst Companion, Tarnbrook Financial Group Holdings Reader, Larkspur Partners Facility Monitor, Tarnbrook Commercial Banking UK Portfolio Reviewer, Tarnbrook Private Banking (Switzerland) Records resource Transfers resource Portfolios resource Batch Reviewer, as a resource

Agents Raidiam Connect Resources

Agents in this estate

Every agent the estate declares.

Raidiam Connect

What this check read, and where each answer came from.

Resolve the agent

The agent publishes its own entity configuration.

Read live

Fetch the authority's statement

The authority answered with its statement about this subject. This check reads it; it does not verify the signature on it.

Read live

Read the envelope

Read out of the statement above, not fetched again. Its metadata policy names 4 detail type(s).

Read above

Compare the capability

2 of 2 of this resource's tools are inside the envelope.

Derived

Check the required authority

This agent reaches the API platform by the direct path, which checks tarnbrook.agent.member or tarnbrook.enforcement.point on Records Assistant. The declaration satisfies every one.

Derived

Tarnbrook Platforms

The customer side. Their resource, their required role.

Customer side

Records resource

Tarnbrook Platforms

Requires tarnbrook.agent.member

The envelope, which is the set of request types the authority permits this agent to ask for, against this resource's tools

records.read Inside the envelope
records.annotate Inside the envelope

Read from the subordinate statement published by the Tarnbrook authority. Bounded by value.

The answer

By this check, Tarnbrook Platforms would admit Records Assistant to the Records resource. It may read records from a collection and write a note on a record.

Compatible

records.read records.annotate

This agent reaches the API platform by the direct path, which checks tarnbrook.agent.member or tarnbrook.enforcement.point on Records Assistant. The declaration satisfies every one.

Also inside the envelope

transfer.initiateNot enforced at this resource.

transfer.statusNot enforced at this resource.

2 Publisher

Tarnbrook Financial Group

4 Detail types it requires

records.read, records.annotate

What the check did

Resolve the agent Read live
Fetch the authority's statement Read live
Read the envelope Read above
4 Compare the capability Derived
5 Check the required authority Derived

Reads this check made

Evidence

07:20:11 UTC Resolve the agent HTTP 200

07:20:11 UTC Fetch the authority's statement HTTP 200

Their identity. Your rules. Every answer says what it was read from.