MAX Authorization Sandbox
A local, reproducible sandbox for testing whether an implementation of signed, default-deny authorization correctly refuses actions that a signed manifest does not explicitly allow, built for researchers to attempt an authorization bypass.
MAX Authorization Sandbox is a local sandbox for testing a signed authorization model: whether a deterministic implementation correctly enforces a human-signed authorization policy and refuses any action that policy does not explicitly allow. A reference baseline exposes three actions, of which a distributed valid manifest authorizes only two, and the sandbox's evaluation question is whether the baseline can be made to execute the third action while the active manifest still does not authorize it.
The trust model combines a signed manifest, one trusted administrative public key, signature verification using SPHINCS+, explicit allow-listed actions, persistent policy state, rollback protection and default-deny behaviour. The repository includes the Rust implementation, signed baseline artifacts, the trusted public key, Docker packaging and automated tests, contains no production keys or credentials, and is designed to run locally, with the default Docker Compose configuration exposing no network port by default.