API POLICY REVISION

See what a policy change would do.

Try the same supplied facts against an original policy and a read-only candidate that requires a supplied, nonempty principal for an otherwise allowed read. Gooo-generated code computes both decisions, all 15 differences, and the change summary in your browser.

This is an unsigned, historical comparison of two fixed profiles. Supplied facts are not authenticated. Results do not establish current authority or apply a policy. No input is sent to a server by this page.

1 / SUPPLY FACTS

Start with a request

Nine-fact JSON

Edit or paste the displayed JSON. Browsers may fold raw line endings; use a file for exact input bytes. This page does not trim text or normalize Unicode. Each decoded text value may contain up to 65,536 UTF-8 bytes; the native decoder also checks the complete JSON.

The displayed editor text is used. Its UTF-16 pairs are checked before encoding; raw file bytes follow a separate path.

Or use raw facts from a JSON file

File bytes go directly to Go. Loading a file does not run it. Requests are limited to 4 MiB, with the original decoder’s smaller raw-facts and per-text limits preserved.

Creates an original baseline, then compares the candidate with those same facts.

2 / RECHECK A SAVED RESULT

Bring back a report

Load a native comparison JSON file, then explicitly recheck it. Go recalculates the complete report, including the saved decisions, differences and source bindings.

Saved comparison JSON

No report loaded. Files may be up to 16 MiB; each nested original proof remains limited to 4 MiB.

Ready for a comparison. The native runtime loads when you run it.

COMPLETED NATIVE RECALCULATION

Comparison result

Classification

Changed fields

All decision fields and native difference flags
Field	Original	Read + principal	Native changed flag

Supplied facts in the native report

Complete native report, including all source bindings

Profiles, runtime and limits

Static manifest hashes check consistency with this package. They are unsigned and do not authenticate its publisher or prove an adversarial executable is trustworthy.

Manifest not loaded yet.

An interrupted or timed-out run produces no result and cannot be saved. The 120-second deadline is an operational limit, not a policy decision.