mesh-policy-core

Pure RBAC/ABAC policy engine with zero dependencies on crypto or network layers.

This crate provides the core domain logic for authorization policies, including:

• Policy rules and evaluation
• Resource path matching
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)

Security

• T20 Mitigation: Strict limits on policy size to prevent algorithmic DoS
  • MAX_RULES_PER_POLICY = 1024
  • MAX_RESOURCE_PATTERN_LENGTH = 256