85 roles. 246 scopes. One screen you can reason about.
Identity and access for regulated AI: who can see, run, approve and override, and the audit trail that proves it.
- Enterprise
- Barnabus Labs
- 2025 — now
- System design, RBAC model, component grammar, engineering handoff
The screens.
The calls I made.
One grammar, twenty-two panels.
Every panel kind is built from the same parts, so the ninth panel reads like the first.
Make permission legible.
A role reads as a sentence: what it can see, run, approve and override. If you can’t say it, you can’t audit it.
Audit is a first-class view.
The record of who did what is designed for the person who has to defend it, not bolted on for the person who has to store it.
Hand over decisions, not pictures.
The engineering package carries the model, the states and the acceptance criteria, not only the screens.