PRISMATECH SHIELD / Developers

Security decisions

Decisions inform controlled application execution.

ALLOW / BLOCK / REQUIRE_2FA

ALLOW does not replace business authorization. BLOCK denies. REQUIRE_2FA is satisfied only after successful additional authentication. Other step-up outcomes depend on the existing contract.

No silent authorization

Never silently switch to ALLOW on network, authorization, or quota failures.

POST /v1/evaluate/login
Authorization: Bearer EXAMPLE_ONLY_NOT_REAL
Idempotency-Key: synthetic-login-0001
Content-Type: application/json

{"userId":"synthetic-user","failedAttempts":0}

Public registration and email verification are not yet approved. Existing customers use the customer portal. No accounts or keys are created here.