📖 Demo Guide
▼ ShowWhat This Demonstrates
A clinical AI chatbot where every query passes through AuthHub's authorization engine. Access is controlled by FGA relationships, governed by three temporal clocks (event time, attestation time, execution time), and auditable in real-time.
The Three Clocks
Clock 1 (Event Time): When a structural identity event occurs (SCIM attribute change). Clock 2 (Attestation Time): When a human approver attests the delegation is still valid. Clock 3 (Execution Time): When the permission check actually runs — verifying conditions haven't drifted since attestation.
Flow
Drift Thresholds (Two-Factor Model)
Drift threshold is NOT a single scalar. It decomposes into two independent concerns:
volatility_coefficient × elapsed_since_attestationEach delegation link has its own volatility — how fast ground truth moves in that domain. A GP federation (stable) vs a locum agency (volatile). Structural distance doesn't belong in this term.
chain_length → re_attestation_cadence_multiplierLonger chains force more aggressive re-attestation cadence, independent of any single link's volatility. Prevents mispricing risk on long, low-volatility chains.
Collapsing both into one scalar would quietly misprice risk on long, low-volatility chains — the product of many small risks compounds in ways a single threshold can't capture.