pub fn run_explain(args: &ExplainArgs) -> Result<()>Expand description
Run the offline policy dry-run/explainer (basil-4vf).
Loads the catalog + policy from files, builds the REAL PDP, evaluates the
proposed tuple (or the --effective preview), and prints the result.
Entirely offline: no bundle, no backend, no socket, no secret material.
Default-deny holds exactly as in enforcement.
This is the default (non---live) path of basil explain; the live path is
client_cli::explain_live, which queries the running broker over the socket.