M36 · Crypto & Institutional Security (simulazione + logica nativa)

Institutional authorisation rules (clearances, two-person control) with simulated key handling.

Benefits: Real authorisation logic you can test safely.

Example of use: Check whether a user may act on a classified resource and whether a second approver is needed.

Key capabilities

• Authorisation by clearance level
• Two-person (dual) control
• Simulated key generation, rotation and signing

Crypto & Institutional Security — SIMULATION for key material plus real native logic (D-24). Contract sicurezza_istituzionale_simulata 0.1.0 (4 capabilities): genera_chiave, ruota_chiave and firma go through a simulated key-store driver whose signatures are marked SIM: and are not cryptographic; autorizza is a real, tested policy engine (ordered clearances, no-read-up, dual control above a threshold). It does not manage the real D-COS signing keys.

Prerequisites

Licence sicurezza_istituzionale_simulata.

Declared limits

Real key custody is blocked by decision D-24; not an accredited or certified system.

Blocked by decision

• Real custody of keys

Interconnections

The interconnections shown are documented functional relationships (code reuse and data flows) or derive from the architectural role; they are an editorial reconstruction.