The rule travels with the data.

// Why CABE

Transport protection ends at transport.

Mission data often moves through relays, stores, disconnected paths, and systems operated by different authorities. The object needs its own control surface.

• Bound attributesClassification, releasability, expiry, and handling constraints are carried with the protected object.
• Point-of-use controlThe receiver evaluates the object against identity, policy, and context before use.
• ComposabilityCABE rides alongside QHx workload identity, proxy-mediated transport, and Notary receipts. The same data can have transport protection, object-level policy, and a signed handling record.