SCOPESCOPESENTINELGLASSCASTLE SECURITY // PUBLIC SUITE
SCOPE TOWER / SCOPESENTINEL
OBSERVE → COMPILE → HOLD / BLOCK / ALLOW
v0.2.1 · FAIL CLOSED
SCOPE / AUTHORIZATION GATE // GLASSCASTLE GATEHOUSE

Nothing enters the castle on assumption.

Bind an authorized security engagement to explicit objectives, target surfaces, rules of engagement, scope evidence, and operational constraints. Unknown, conflicting, stale, or incomplete authority becomes HOLD rather than implied permission.

GATEHOLD
EXECUTION AUTHORITYEXTERNAL ASSERTION REQUIRED
HOLDS00
CONTRADICTIONS00
CONTRACT DIGESTNOT COMPILED
GATEHOUSE PRECEDENCEFail closed. Preserve the strongest boundary.

Explicit exclusion outranks structured inclusion. Structured scope outranks prose inference. Unknown never upgrades itself.

ALLOWThe compiled scope contract permits this query within recorded constraints.
HOLDAuthority is ambiguous, incomplete, conflicting, stale, or otherwise unresolved.
BLOCKThe compiled contract contains evidence that forbids the query.
ALLOW ≠ AUTHORIZED EXECUTION. ALLOW means the compiled scope contract permits this query. A separate external authorization assertion is still required before execution.

Authority is unknown, incomplete, ambiguous, contradictory, or otherwise unresolved.

Engagement BriefDeclare the human authorization context. Planning metadata never creates authority.
TARGET SURFACES
Policy SourcesCompile supplied evidence only. ScopeSentinel makes no target-network requests.