Authpermit documentation

Authpermit is customer-owned trust infrastructure. The platform is organised as a kernel (tenancy, accounts, authorization, policy, events, audit, vault, storage, federation) and domain products built on it: Identity, Verify, Credentials, Secure, Guard and Sentinel, plus Automation, SecurityStudio, Intelligence and the Developer platform.

Two rules

  1. Same path for every channel. REST, MCP, LiveView, mobile and automations execute the same authorized, audited commands.
  2. AI is never the source of truth. Evidence, cryptography, issuers, deterministic validation, policy and human review decide.

Five fundamental objects

ObjectQuestion
IdentityWho is the subject?
EvidenceWhat supports the claim?
ClaimWhat are we asserting?
VerificationHow did we conclude it?
PolicyWhat happens because of it?