The capability being checked (e.g., 'relay:write', 'state:read').
The enforcement decision.
The identity being checked.
OptionalmessageThe triggering message, if available. Accepts NIP-01 arrays or NIP-5D NappletMessage envelopes.
OptionalreasonWhy the decision was reached. Optional for backwards compatibility with pre-v1.7 audit consumers. 'allowed' -> decision === 'allow' 'capability-missing' -> decision === 'deny' (capability lookup failed)
Event emitted on every ACL enforcement check.
Param: identity
The napplet identity being checked
Param: capability
The capability being checked
Param: decision
Whether the check passed or failed
Example