Arkavo engineering journal

Decisions, experiments,
and what we learned.

Engineering case studies with code, methods, and clear limits. A record of what we built, what failed, and what remains to be tested.

Subscribe via RSS

Latest case study

Experimental · Authorization

Adding AI Risk Signals to OpenTDF Without Expanding Permissions

How a deny-only interface constrains model judgment—and what a threshold experiment, a wiring failure, and an external data flow reveal about its limits.

Paul Flynn · September 19, 2026

Read the case study

THE RESTRICTOR INVARIANT

finalPermits
⊆ policyPermits

Code sets the boundary.

Decisions, experiments,and what we learned.

Latest case study

Adding AI Risk Signals to OpenTDF Without Expanding Permissions

Decisions, experiments,
and what we learned.