Commercial

Entitlements

Runtime disconnected

Which feature bundles a partner may grant, and to whom. An entitlement a partner does not hold cannot be granted onward, and holding one is never the same as being permitted to use it.

What this surface will govern

A grant is bounded by what the granter holds
Payment and country gating are never entitlements
Revoking a bundle takes effect at the server on the next request
An expired entitlement fails closed rather than lapsing quietly

Declared vocabulary

These are the only values this surface’s contract admits. They are identifiers, not labels, so they read the same in every language — which is what makes them searchable in a log.

riskLevels: lowmediumhighcritical
authStrengths: sessionstep-upphishing-resistant-step-up
approvalModes: noneconfirmationpolicy-baseddual-control