Module policy 

Structs

PolicyActorSelector

PolicyAllowRule

PolicyCompiler

PolicyConfig

PolicyDecision

PolicyEngine

PolicyRequest

PolicyRule

PolicyTestCase

PolicyTestConfig

Enums

PolicyAction

PolicyBranchScope

PolicyError

Engine-layer policy enforcement error. Denied is the normal “policy said no” path; Internal covers evaluation failures (malformed rule, Cedar internal error, etc.).

PolicyExpectation

ResourceScope

Resource scope for a policy decision. Branch-grained on purpose — per-type / per-row granularity is owned by the query-layer (MR-725).

Traits

PolicyChecker

Engine-layer policy enforcement trait. Implemented by PolicyEngine (Cedar-backed) and any mock checker used in tests.