The four dispositions

Every assessment is bound to principal, workspace, intended-use hash, exact resource/terms versions, policy version, evidence snapshot, and expiry — and returns one of exactly four dispositions with structured reason codes. Rightshold deliberately publishes no universal trust score.

ALLOW_WITHIN_POLICY

The reviewed rights profile documents every requested permission and no prohibition applies. Means only that the defined policy checks passed for this narrow action on the available evidence — not legal certification, not universally safe.

BLOCK

The controlling terms prohibit a requested use. A signature on a separate claim never overrides the controlling terms.

HUMAN_REVIEW

Rights authority is disputed, clauses are unresolved, or the profile is unreviewed. A human reviewer (assurance bureau case) must adjudicate before acquisition.

INSUFFICIENT_EVIDENCE

Resource, controlling terms snapshot, version, or reviewed profile is missing or inaccessible. 'Not found' is never permission.