Declared Tier vs Required Tier (Delta)

declared_required_tier_delta

Compares self-declared privilege posture against structurally required posture and computes a deterministic delta.

Decision Context

Evidence required: Valid declared tier plus parseable structured posture inputs (connectors, tools, MCP permissions, or equivalent).

Decision impact: Delta >= 2 freezes by policy; delta == 1 publishes with warning.

Linked CRABS Tags

CRABS-A20, CRABS-A21

Linked DAD Rules

DAD-CRT-40, DAD-WRN-40

Least privilege control objective used as external framing.