policy engine

Also written: pdp.py

The zero trust part that says yes or no to each request, based on user, device and its posture, page and context. The lab's pdp.py denies anything it has no rule for.