Policy & Session Model

Policies define:

• access requirements

• session duration

• usage limits

Sessions are:

• temporary

• non-reusable

• automatically expired

Together, they provide predictable access control.