Product boundary
StateMirror preserves decision-time evidence. PlanSignal, DenySignal and ExpirySignal expose focused facts. Your application owns decisions and actions.
State is queried. Decisions are made. Actions remain application-owned.
Application responsibility
Your application owns identity, business rules, authorization, feature gating, side effects and human overrides. Those choices depend on your domain, routes and operational requirements.
StateMirror does not evaluate policy, execute workflows or decide outcomes. Its technical specification defines the evidence and verification contract.
Facts and evidence
- No denial fact is not permission. DenySignal reports whether a denial fact is present.
- Not expired is not authorized. ExpirySignal reports temporal validity using stored state and the configured clock.
- Plan state is not access control. PlanSignal returns facts for your application to evaluate.
- Evidence is not judgment. StateMirror preserves what your application submitted about a decision moment.
- Verification checks integrity. Payload, hash and chain checks do not establish upstream truth, policy correctness or decision correctness.
Failure handling
Inputs can be stale, missing or incorrect. Networks and databases can fail. Your application defines how to behave when facts cannot be confirmed or evidence capture fails, including fail-open or fail-closed behavior for each use case.
You operate the self-hosted software in your environment. Preserving evidence does not guarantee safety or suitability for your domain.