flowchart TD
  accTitle: ASILO: authorisation at the effect point
  accDescr: A request passes four checks in order: identity verified according to the profile, input conforming to the contract, authorisation of resource, operation and context, and required additional controls. Any negative answer rejects it without the requested effect; if all pass it is executed at the point of effect, and in both cases the result and observed effects are recorded.
  P["Request"] --> I{"Identity verified according to the profile?"}
  I -->|"Yes"| V{"Input conforms to the contract?"}
  I -->|"No"| R["Reject without the requested effect"]
  V -->|"Yes"| A{"Authorised resource, operation and context?"}
  V -->|"No"| R
  A -->|"No"| R
  A -->|"Yes"| H{"Required additional controls satisfied?"}
  H -->|"No"| R
  H -->|"Yes"| E["Execute at the point of effect"]
  E --> L["Record result and observed effects"]
  R --> L