chore(authz): prove stacked optimizations at policy scale

[strantalis]

Superseded by the scale tests merged in #3983. Rebasing this proof layer onto main (f2635158) leaves no changes.

The six optimization PRs now inherit and run the merged workload directly. Current comparison results are recorded in #3991.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	201.21514ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	117.335154ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	432.140324ms
Throughput	231.41 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.738357771s
Average Latency	386.598031ms
Throughput	129.07 requests/second

[github-actions]

X-Test Results

bats-test-results
✅ go@main-main
✅ go@pull-3993-pull-3993
✅ go@pull-3993-main
✅ go@pull-3993-v0.9.0
✅ java@main-main
✅ java@main-pull-3993
✅ go@main-pull-3993
✅ go@main-v0.9.0
✅ java@main-v0.9.0
✅ js@main-main
✅ js@main-pull-3993
✅ js@main-v0.9.0
opentdfplatformTLGD5M.dockerbuild
govulncheck-failure-1
govulncheck-failure-8
govulncheck-failure-3

[github-actions]

X-Test Failure Report

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	225.060373ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	127.471352ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	404.558796ms
Throughput	247.18 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	44.654100555s
Average Latency	445.74886ms
Throughput	111.97 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	219.660424ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	121.59826ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	442.638314ms
Throughput	225.92 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	43.855306859s
Average Latency	437.609093ms
Throughput	114.01 requests/second

[github-actions]

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

• otdfctl
• service
• tests-bdd

See the workflow run for details.

[github-actions]

X-Test Results

✅ js@main-main
✅ go@main-main
✅ java@main-pull-3993
✅ go@pull-3993-pull-3993
bats-test-results
✅ go@pull-3993-main
✅ go@pull-3993-v0.9.0
✅ go@main-v0.9.0
govulncheck-failure-3
opentdfplatform8MJQ9B.dockerbuild
✅ go@main-pull-3993
✅ java@main-main
✅ java@main-v0.9.0
✅ js@main-pull-3993
✅ js@main-v0.9.0
govulncheck-failure-1
govulncheck-failure-8