Permit

Hi again <@U0531S0KQQ2>
Yes it does. both via Topics (<https://docs.opal.ac/tutorials/trigger_data_updates#how-to-trigger-updates|data>, <https://docs.opal.ac/tutorials/track_a_git_repo#2-opal-client-subscribes-to-policy-update-notifications|policy>) in a light sense, and via <https://docs.opal.ac/overview/scopes|scopes> in a deeper sense.

Thank you, and where can I read more on eviction policies for these on the agents?

Not sure what you mean by “eviction policies”
Client access is gated via the JWT created for the client <https://docs.opal.ac/getting-started/running-opal/run-opal-client/obtain-jwt-token>

<https://opal.permit.io/redoc#tag/Security/operation/generate_new_access_token_token_post>