Most cloud systems make authorization decisions once at login, leaving high-risk data actions largely unchecked during an active session. Evaluating each sensitive operation as an independent decision ...