Signed 28-Key Policy Engine & Anti-Rollback
How the 28-key hierarchical policy catalog is evaluated across scopes, signed with Ed25519 JWS, and verified by clients.
Hierarchical Inheritance with Locked Overrides
Policies resolve across four hierarchical scopes: Workspace → Department → Policy Group → User. When a higher scope marks a policy entry as locked: true, no lower scope can override it.
Every policy publication increments the workspace policy version, records a full diff for instant rollback (/api/v1/admin/policies/rollback), signs a compact JWS bundle (alg: EdDSA, typ: madar-policy+jwt) using the workspace's Ed25519 key, and pushes policy.updated to connected clients. Clients reject any JWS whose version is lower than the currently stored version.