Maelys DL
An embedded Datalog policy engine for native C applications and browser runtimes. Designed to make authorization logic declarative, auditable, and fail-closed by construction.
Maelys DL was designed and built as the policy substrate for the Maelys Agentic orchestration runtime — a local-first, C-native multi-agent system targeting Apple Silicon. The engine is extracted as a standalone library so it can be embedded independently wherever declarative, fail-closed authorization is needed.
Maelys DL implements a closed-vocabulary, stratified-negation Datalog engine with a bounded embedded C runtime. Policies are loaded from manifests, verified by SHA-256, and evaluated exactly once per request against caller-supplied facts.
The engine is designed for contexts where authorization must be explicit, deterministic, and auditable — every decision can be traced back to the exact policy rule and EDB facts that produced it.