Pre-authorization

A security mechanism contrasted with post-hoc auditing, in which a policy engine independent of the model determines the legitimacy of an action before it occurs. Authorization decisions are separated from the agent itself and assigned to a deterministic rule system, drawing on the ideas of zero trust security architecture.