What's Next

OPL can express more than Magistrate decides today. These are the next parts we are working on. They aren't available yet, and their order may change.

• More shapes in the studio. Geofences around a point, and regions built with intersect and difference.
• Cities. city("…") as a region.
• More area shapes. Ellipses, 3D boxes for height, and drawn areas.
• Time windows. Rules that apply only on certain days or hours, in a time zone you name.
• Movement over time. Rules about how long a device stayed in a region, or the order it visited places in.
• Your user's attributes. Rules that use facts from your identity provider, such as an account tier.
• Device key security. A minimum level of hardware protection for the key that signed the proof.
• Obligations from the studio. Step-up authentication, logging, a time limit or a reduced feature set attached to a permit.
• Finer handling of UNKNOWN. Separate answers for a device that may be spoofing and a device that simply has no fix.
• Reusable regions. Named regions that several policies share.

To ask about one of these, write to developer@octetproof.com.