NATS Authorization Model

Status: DRAFT

Goal

A compromised device must not be able to publish to, subscribe to, or control another device’s subjects.

Target pattern

For device DEVICE_ID:

Publish:
  devices.prod.DEVICE_ID.pub.>

Subscribe:
  devices.prod.DEVICE_ID.sub.>

Required negative tests

• device A cannot publish to device B subjects
• device A cannot subscribe to device B subjects
• device cannot publish privileged backend-control subjects
• revoked JWT/credential cannot reconnect
• expired JWT behavior is defined and tested

Store test output under evidence/<version>/.