Integrate
Register an API client, exchange its credentials for a bearer token and call
GET /v1/disclose/{handle}?purpose=…. One endpoint, one decision, always audited.
Quickstart →
Afixo
Context-specific personas, purpose-aware disclosure at the API boundary.
Dashboard
Subjects sign in at afixo.io to author personas, register API clients, write disclosure rules with a live preview, and read the audit log. Dashboard guide →
How it works
Given (subject, requester, purpose) the engine selects the most specific rule, resolves its persona, applies the sensitivity ceiling and the allow-list, denies by default and records the decision before answering. The decision algorithm →
Where things stand
Section titled “Where things stand”Afixo is the second version of a university final project, rebuilt as Rust services
behind Cloudflare Workers. All six services — the gateway, auth, identity, policy,
disclosure and audit — are implemented and deployed; sign-in, client credentials,
disclosure decisions and the hash-chained audit log work end to end. What is deliberately
left out is listed on What is deliberately not done; see
the report for what changed between the versions and the
changelog for when.