Authorization is infrastructure.
Amsonia Core treats tenant isolation and delegated access as security boundaries, not conventions left to each handler. It provides a standalone Go API, PostgreSQL adapter and migrations, an in-memory adapter for tests, an operator CLI, and a React administration console.
Signed context
Tenant context is bound per transaction and invalid context yields no tenant rows.
Delegated RBAC
Permission catalogs, scoped grants, immutable role versions, and grant-cycle protection.
Admin identity
Argon2id credentials, lockout, rotating refresh sessions, and one-time bootstrap.
Audit history
Append-only events make policy changes and authorization operations reviewable.
Small surfaces. Explicit adapters.
The reusable kernel is separated from storage and HTTP composition. Teams can start with the in-memory adapter, run the complete PostgreSQL implementation, or extend the published interfaces without importing the commercial application.
cmd/api standalone HTTP API
cmd/amsonia migrations and administrator CLI
postgres adapter, migrations, and RLS tests
memory in-memory adapter for tests
internal/coreapp identity, session, tenant, and HTTP composition
web React management console
openapi versioned HTTP contractCore is deliberately smaller than Amsonia.
Core includes identity, sessions, tenants, memberships, roles, permissions, authorization decisions, and policy audit. Billing, commerce, AI, education, messaging, media, and white-label operations remain in the complete commercial product.