Inspired by Google Zanzibar. AuthZEN compliant.

git clone https://github.com/inferadb/inferadb && cd inferadb
git submodule update --init --recursive
make setup && make engine-dev

Check a permission:

curl -N -X POST http://localhost:8080/v1/evaluate \
  -H "Content-Type: application/json" \
  -d '{"evaluations": [{"subject": "user:alice", "resource": "doc:readme", "permission": "viewer"}]}'

Response (SSE stream):

data: {"decision":"allow","index":0}

event: summary
data: {"total":1,"complete":true}

• Sub-millisecond latency — <1ms cached, 3-5ms uncached at 100K+ RPS
• Declarative policies (IPL) — Version-controlled, testable, composable
• WASM extensibility — Custom logic in sandboxed modules
• Multi-tenant isolation — Per-tenant encryption, namespaces, audit logs
• Graph-native ReBAC — Hierarchies, groups, ownership as traversable relationships

graph LR
    A[Client] --> B[Engine]
    A --> C[Control]
    B --> D[(FoundationDB)]
    C --> D
    B -.->|JWT validation| C

Stack: Rust, FoundationDB, gRPC/REST, Kubernetes

make help             # List all commands
make build            # Debug build
make check            # Format, lint, audit
make test             # Unit tests
make engine-dev       # Engine with hot-reload
make control-dev      # Control plane with hot-reload
make dashboard-dev    # Dashboard on localhost:5173

Kubernetes:

make k8s-start        # Start local K8s stack
make k8s-status       # Check deployment health
make k8s-stop         # Stop (preserves data)
make k8s-purge        # Remove all resources

• engine/README.md — Authorization engine
• control/README.md — Control plane
• tests/README.md — Integration tests
• docs/ — Full specifications

Join us on Discord to discuss InferaDB, get help with your projects, and connect with other developers. Whether you have questions, want to share what you're building, or are interested in contributing, we'd love to have you!

Licensed under either of:

• Apache License, Version 2.0
• MIT License

at your option.