What every agent in a protected system shares: downloads and checks the signed policy snapshots of its service, keeps the last one on disk, decides access with the policy engine and ships access events; runs on Java 8 with the engine, Jackson 2 and Bouncy Castle

Hadoop-free Java 8 policy, path, runtime and audit logic shared by versioned NameNode adapters

Enforces GrantForge policies for MySQL 8 servers as a proxy that clients connect to in place of the server: it relays MySQL's protocol and sign-in, checks every statement against the service's signed policy snapshot down to columns, ...

Enforces GrantForge policies inside ZooKeeper servers 3.6 to 3.9: an authentication provider for the sasl scheme that decides the ACL entry sasl:grantforge with the service's signed policy snapshot, and keeps every other sasl entry as ...