OptionalattributesOptionalgrantsResolved grants for the actor. Omit to leave the rendered $can
undefined (conditions referencing it fail closed — the real lake
write boundary still enforces).
OptionalguardStored-resource lookup for guard predicates using ->. Omit when no
guard can dereference; missing lookups resolve null and deny fail-closed.
OptionalguardsLive mutation guards held for this instance (a reactive adapter's
guard stream). Every action commit is an update write to the instance
doc, so a guard that matches the instance and denies that write disables
every action with mutation-guard-denied. Omit to skip the gate in this
projection — the engine's verb paths load live guards and re-check at
commit time (the runtime evaluation path fetches them itself).
OptionallocalThe actor's principal id in the workflow resource's own identity
namespace — the comparand for everything the resource's lake evaluates
(identity() in guard predicates, the anchor ACL's grant filters).
Omitted when it equals Actor.id (org-level resources, robots).
OptionalnowThe $now reading every condition in this projection shares. Omit to
use wallClock; a reactive consumer (or the bench) passes its
own clock reading for a stable/deterministic timeline.
OptionalresourcePer-FOREIGN-subject-resource access — the actor's ACL grants PLUS the
actor's principal id in that resource's own namespace — keyed by
resource-shaped GDR (<type>:<id>); feeds the subject-write forecast on
effects-bearing actions (SubjectPermissionDenial). A resource
appears only when both halves resolved; omit it (or the whole map) to
skip that resource's forecast (degrade open — the subject's lake still
enforces). The runtime evaluation path resolves this through each
resource's own client.
The in-memory snapshot to evaluate against. The caller assembles it
from whatever source — a fetch-backed evaluation or a
live store. The _id of every doc must be in GDR-URI form, as
buildSnapshot produces.
Resolved org-level user attributes for the actor. Omit to leave the rendered
$attributesundefined (conditions referencing it fail closed).