Platform Authorization Model
Enforces platform-wide authorization invariants across API contracts, gateway configurations, access tokens, and frontend screen gates.
The Platform Authorization Model skill establishes the strict security and access control invariants governing generated applications within the OpenChoreo ecosystem. It guides Claude when authoring or reviewing security.json definitions, OpenAPI security requirements, gateway routing policies, 401 error handlers, and user-scoped /me/ paths. By centralizing core architecture decisions—such as scope-based authority, whole-string comparisons, gateway-enforced call decisions, and screen-operation binding—it prevents authorization drifts, recursive authentication loops, and privilege escalation vulnerabilities during automated code generation.