mesh-policy-core

Pure RBAC/ABAC policy engine with zero dependencies on crypto or network layers.

This crate provides the core domain logic for authorization policies, including:

• Policy rules and evaluation
• Resource path matching
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)

Security

• T20 Mitigation: Strict limits on policy size to prevent algorithmic DoS
  • MAX_RULES_PER_POLICY = 1024
  • MAX_RESOURCE_PATTERN_LENGTH = 256

core-policy

Pure RBAC/ABAC policy engine with zero crypto or network dependencies.

Evaluates access-control decisions using wildcard path matching, context expressions (role == "admin" || role == "auditor"), and composable policy rules. Designed for edge enforcement where latency matters.

no_std support

This crate is #![no_std] compatible with alloc (uses Vec, String, BTreeMap). Verified on thumbv7em-none-eabi.

The optional toml feature enables Policy::from_toml() / Policy::to_toml() and requires std:

# no_std (with alloc):
core-policy = "0.11"

# With TOML serialization (requires std):
core-policy = { version = "0.11", features = ["toml"] }

Links

• Repository
• Security policy
• API docs

License

Apache-2.0