//! Internal session-validation pipeline (RFC: `deepen-session-validation-pipeline`, step 1).
//!
//! Splits the SvAware refresh-and-recheck orchestration into:
//! - [`core`] — synchronous, IO-free state machine encoding the decision tree.
//! - [`adapter`] — async driver loop that fulfills [`core::SvStep`] requests
//! via the existing ports (`SessionStore`, `PasAuthPort`, `SvCachePort`,
//! `TokenCipher`).
//!
//! The module is `pub(super)`: this refactor preserves the public API
//! ([`SessionValidator`](super::SessionValidator) is unchanged).
//! Subsequent RFC steps may promote select types to the public surface.
pub
pub