Integrate
Register an API client, exchange its credentials for a bearer token and call
GET /v1/disclose/{handle}?purpose=…. One endpoint, one decision, always audited.
Quickstart →
Integrate
Register an API client, exchange its credentials for a bearer token and call
GET /v1/disclose/{handle}?purpose=…. One endpoint, one decision, always audited.
Quickstart →
Dashboard
Subjects sign in at afixo.io to author personas, register API clients, write disclosure rules with a live preview, and read the audit log. Dashboard guide →
How it works
Given (subject, requester, purpose) the engine selects the most specific rule, resolves its persona, applies the sensitivity ceiling and the allow-list, denies by default and records the decision before answering. The decision algorithm →
Afixo is the second version of a university final project, rebuilt as Rust services behind Cloudflare Workers. As of 2026-08-22 the policy service, the gateway and the decision engine are complete; authentication, identity, disclosure and audit persistence are skeletons. Pages that describe unfinished behaviour say so. See the report for what changed between the versions.