This part of the iSHARE Scheme Trust Framework is considered normative and is therefore compliant with RFC 2119.
...
This page describes (and prescribes) how, in data spaces/iSHARE network, delegation is communicated between different parties.
In data spaces/iSHARE network, delegation evidence expresses the delegation of rights from a delegator (the party that delegates rights; the policyIssuer) to the delegate (the party that receives the delegated rights; i.e. the accessSubject). Rights are expressed in rules in terms of allowed actions to be performed on resources, under the license(s) as defined in policySets.
Delegation evidence is modeled modelled as a JSON object inspired by the XACML 3.0 specifications and structured as follows:
...
Please note that although in XACML the attributes PolicySetId, Version and PolicyCombiningAlgId are mandatory in XACML they are not ported to the iSHARE JSON structure. iSHARE Trust Framework follows the "deny-override" Policy Combining Algorithm. This implies that if at least one policy is evaluated as “deny”, the integrated output must also be “deny”.