Files
Enterprise-MCP-Service-Bus/docs/adr/ADR-015-nba-is-not-authorization.en-us.md
2026-09-14 14:54:28 -03:00

630 B

ADR-015: NBA as an orchestration decision, not an authorization decision

Status: Accepted. Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, when applicable, the relevant contract in RI/docs/interfaces/.

Context

Is NBA an authorization decision?

Decision

No — it is orchestration intent; Gateway/PDP reauthorize every execution.

Alternatives Considered

Orchestrator dispatching directly to the backend without going through the Gateway.

Consequences

EP-11-T04 implements the DENY/recalculation branch of §10.1.