Enforces GrantForge policies inside HBase 2.5 and later masters and region servers: a coprocessor that checks table, namespace and cluster operations, reads and writes against the service's signed policy snapshot, returns only the columns a user may read rather than failing a whole read, hides the namespaces and tables a user may not use and folds repeated accesses into one audit event. One Java 8 jar with the agent core inside it, for HBase's lib directory.