PermissionForge stores permissions as Permission Sets that admins edit at runtime: per-model CRUD flags and custom actions, per-field read/edit access with masking, and row-level query rules. It applies them in your models (find_by, permission_scoped, attribute readers and serialization) and controllers, caches each user's permissions in any Rails cache store, records every permission change in an audit log, and ships an admin UI and an opt-in JSON admin API.