Decides access requests against policies; embedded by the agents in the systems GrantForge protects, so it runs on Java 8 and depends on nothing