pub fn enforce_capabilities(
catalog: &Catalog,
policy: CapabilityPolicy,
) -> Result<CapabilitySummary, CapabilityError>Expand description
Validate every backend’s declared provides against what its keys (and its
explicit requires) need, applying policy.
Pure and offline: it reads only the catalog, makes no backend calls, and
needs no Vault privilege. Suitable for both startup and the check lint.
§Errors
CapabilityError (carrying every gap) when policy makes one or more
unmet requirements fatal: always under strict, and under degraded for a
gap on a missing="error" key.