Identity Evidence Close
Identity Boundaries
Did access still survive?
Your access says REVOKED. BOUNDA proves whether a token, session or credential survived.
Prove whether an access right survived or was created after REVOKED, DENIED or DISABLED.
Lexicon lock
Identity Boundaries
Produit: Identity Evidence Close
Market: IAM / Zero Confiance / Cloud Security
Buyer: CISO · IAM Lead · CTO
Avoid: IAM Boundaries as root family
Consequence units
What can still be born after the NO?
tokensessioncredentialAPI keyroleservice accountpost-revoke API call
App surfaces
Concrete flows to choose in the app.
- Token
- Session
- Credential
- API key
- Role
- Service account
- Post-revoke API call
Receipts needed
No receipt, no clean claim.
- revoke/deny logs
- token inventory
- session logs
- IAM audit
- API calls post-revoke
- role history
Reality Passage Engine
Regardez la réalité franchir la boundary.
Votre système a dit NON. BOUNDA checks whether forbidden Reality Units were born anyway — with expected/observed deltas, receipts, proof sufficiency, verdict and action.
No receipt, no clean claim.
Le système ditcôté déclaré
STOP-LINE
Réalité avalautre côté
Evidence Close output
HELD, BREACHED ou UNKNOWN — sealed.
HELD
Receipts are sufficient and all forbidden consequence units stayed at zero.
BREACHED
At least one forbidden consequence unit was born after the NO.
UNKNOWN
Receipts are insufficient. BOUNDA refuses to produce a fake HELD.