status = ACTIVE → TRUE authentication = PASS → TRUE requested_action = READ_ACCOUNT → TRUE READ_ACCOUNT ∈ permissions → TRUE policies_allow = true → TRUE ↓ 🔎 Authorization Check ↓ 🟢 All conditions TRUE ↓ authorization = GRANTED ↓ access = ALLOW #384