//! Policy / waiver / baseline runtime state.
//!
//! This module is split into thin, single-responsibility submodules:
//!
//! - `loaders` — file I/O for policy/baseline/waiver YAML/JSON, routed
//! through the [`FileSystemProvider`](crate::ports::FileSystemProvider)
//! port so the domain layer never reaches `std::fs` directly.
//! - `validators` — schema-version + invariant checks invoked at load
//! time; matched-only-when-loaded so the matching pipeline never sees
//! unsafe state.
//! - `apply` — runtime application of loaded state against
//! `Vec<Finding>` (baseline removal, waiver removal, policy override
//! action substitution + audit trail).
//! - `diff` — report-to-report comparison, classifying findings as new,
//! resolved, waived, baselined, or unchanged.
//! - `matchers` — pure predicates shared by `apply` and `diff` for
//! waiver / policy-override / context / specificity matching.
pub use ;
pub use ;
pub use ;
pub use ;