Rent the intelligence, own the governance — a control plane for imps: software colleagues whose every action passes through a gateway you control (default-deny egress, injected credentials, budgets, approval gates, audit).
//! Namespaced scope matching, shared by the judge (rules) and the ledger
//! (limits). A scope governs a subject if the subject is that scope or nests
//! under it — so "org" governs the whole fleet and "org/yuko" one imp.
pubfnapplies(scope:&str, subject:&str)->bool{
subject == scope || subject.starts_with(&format!("{scope}/"))}