{"handle":"authzen-access-control-ruling-table","name":"AuthZEN Access Control Ruling Table","description":"Converts plain-English access-control questions into a batch AuthZEN evaluation, resolving canonical subject and resource IDs, translating business predicates into exact action/attribute structures, and returning a markdown ruling table with PERMIT/DENY verdicts, governing policy rules, and execution hashes.","input_schema":{"type":"object","required":["questions","subject_search_endpoint","resource_search_endpoint","evaluations_endpoint"],"properties":{"questions":{"type":"array","items":{"type":"string"},"title":"Access Control Questions","description":"Array of plain-English questions like 'Can Alice approve payment TX-042?' or 'Can admin Bob soft-delete archived document DOC-7?'. Each question will be parsed to extract subject, action, and resource."},"policy_context":{"type":"string","title":"Policy Context","description":"Optional business context or policy rules to guide predicate translation (e.g., 'soft delete means action {\"name\":\"delete\",\"properties\":{\"soft\":true}}; archived means resource attribute {\"archived\":true}')."},"evaluations_endpoint":{"type":"string","title":"Evaluations Endpoint","format":"uri","description":"URL of the AuthZEN POST /access/v1/evaluations batch endpoint. Format: https://gateway.example.com/access/v1/evaluations"},"subject_search_endpoint":{"type":"string","title":"Subject Search Endpoint","format":"uri","description":"URL of the AINumbers gateway endpoint to resolve subject canonical IDs (e.g., 'alice' from 'Alice'). Format: https://gateway.example.com/subjects/search"},"resource_search_endpoint":{"type":"string","title":"Resource Search Endpoint","format":"uri","description":"URL of the AINumbers gateway endpoint to resolve resource canonical IDs and attributes (e.g., 'TX-042' from 'payment TX-042'). Format: https://gateway.example.com/resources/search"}},"additionalProperties":false},"input_example":{"questions":["Can Alice approve payment TX-042?","Can admin Bob soft-delete archived document DOC-7?"],"policy_context":"soft delete means action {\"name\":\"delete\",\"properties\":{\"soft\":true}}; archived document means resource attributes {\"archived\":true}","evaluations_endpoint":"https://gateway.example.com/access/v1/evaluations","subject_search_endpoint":"https://gateway.example.com/subjects/search","resource_search_endpoint":"https://gateway.example.com/resources/search"},"output_example":"```json\n{\n  \"markdown_table\": \"| Question | Decision | Governing Policy Rule | Execution Hash |\\n| --- | --- | --- | --- |\\n| Can Alice approve payment TX-042? | DENY | \\\"default: deny\\\" | b2587c08ded9398ef1853e166e25450bf2b96ae38977cb7ca2da6d757e0c2006 |\\n| Can admin Bob soft-delete archived document DOC-7? | PERMIT | \\\"delete: permit iff action.properties.soft == true\\\" | d3b64b76de2b8591eed395adde6f1afac37240a6a3eb701d196860d11e12d7ee |\"\n}\n```","author":{"name":"Tim Swanson","kind":"personal"}}