# Authorization and execution

Bind operations to explicit targets, expiry and permissions across process and network boundaries.

## Repositories for this capability

Choose an implementation and open its source and README to get started.

[authorized-execution](https://github.com/crowsi-net/authorized-execution) — Policy, target binding, expiry, revocation and authorized execution boundaries.

[crowsi-auth-routing](https://github.com/crowsi-net/crowsi-auth-routing) — Use the same validated authorization route declarations across an application and its MCP interface.

[crowsi-browser-security](https://github.com/crowsi-net/crowsi-browser-security) — Compose browser bootstrap, session and CSRF checks for a caller-owned authentication flow.

[crowsi-process-adapter](https://github.com/crowsi-net/crowsi-process-adapter) — Supervise a process tree and clean it up through explicit start and shutdown operations.

[crowsi-network-controller](https://github.com/crowsi-net/crowsi-network-controller) — Evaluate a proposed network change against a deny-by-default policy before applying it.

[crowsi-network-sandbox](https://github.com/crowsi-net/crowsi-network-sandbox) — Run a finite command in a Linux environment with a separate network namespace and bounded resources.

## Read the setup instructions

Each repository README describes prerequisites, interfaces and examples.

[authorized-execution — README](https://github.com/crowsi-net/authorized-execution/blob/main/README.md)

[crowsi-auth-routing — README](https://github.com/crowsi-net/crowsi-auth-routing/blob/main/README.md)

[crowsi-browser-security — README](https://github.com/crowsi-net/crowsi-browser-security/blob/main/README.md)

## Explore other capabilities

Browse related capabilities and the full library.

[Explore the foundations](https://crowsi.org/capabilities)

[All libraries](https://crowsi.org/oss)

Canonical: https://crowsi.org/capabilities/authorization