Skip to main content

​
Mandates

A Mandate is an immutable statement of what one authenticated end user approved. If the authority changes, create and approve a new Mandate rather than mutating the old one. Every Mandate contains an opaque subject_reference, one policy, an approval deadline, and a validity window of at most 30 days. CONSUMED, REVOKED, and EXPIRED are terminal.

​
Authorizations

An Authorization is the durable result of evaluating one proposed action. Every structurally valid evaluation creates one, including non-allow results. An ALLOW starts in RESERVED. It may become COMMITTED, CANCELLED, or EXPIRED. Non-allow decisions use terminal DENIED or INDETERMINATE states.

​
Single-use guarantee

  • A Mandate may evaluate many candidates but can have only one active reservation.
  • Concurrent eligible requests cannot both reserve it.
  • Cancellation or reservation expiry permits a later eligible attempt.
  • Commit permanently consumes the Mandate.
  • can_execute is true only for an unexpired ALLOW reservation.
Disable any external credential before cancelling or revoking. Attesso records your assertion but cannot disable cards, tokens, provider jobs, or bookings.

Complete an authorization

Implement execution gating, commit, cancellation, and retries.