Glossary

ReBAC (Relationship-Based Access Control)

ReBAC defines permissions by the relationships between entities — people, Agents, workspaces, data — rather than by static roles. Oraclous enforces ReBAC platform-wide, at the Harness level, so the fabric that runs the work also proves who could touch what. Contrast with RBAC: RBAC grants access by assigned role and suffers "role explosion"; ReBAC grants access by relationship to the resource.