of

The access policies policies of the aggregates of manifest in contexts, each resolved to the aggregate aggregatesOf gives for its state type (the types whose state is of that class), or the one it names. It refuses, naming the policy or the aggregate:

• a policy whose state is no aggregate's of the node (when strict, a node hosting every context of the service; otherwise such a policy is an aggregate's another node hosts, and is left out), or the state of several without naming one, or naming an aggregate whose state it is not;

• two policies of one aggregate;

• an aggregate that declares access attributes without a policy: nothing is granted by omission.

The attributes a policy compares are checked as it is evaluated (declares): its references are typed by its state, so only a policy built against another version of the state names one its aggregate does not declare.