Tuff

Policy-as-code authorization that stays out of your way. Tuff evaluates permissions at the edge, caches decisions aggressively, and audits every grant and denial.