Module pas_port 

PAS network-boundary port and deep refresh core.

See 0context/STANDARDS_SESSION_LIVENESS.md for the consumer contract the port encodes.

Module structure:

• PasAuthPort / PasFailure — port + failure vocabulary, available under the oauth feature.
• [pas_refresh] / [PasRefreshOutcome] / [CipherFailure] — the decrypt-and-classify deep core, gated under session-liveness because it depends on TokenCipher.

Enums

PasFailure

Classified PAS-side failure. Single source of truth for the HTTP-status → cause mapping; only adapters produce these.

Traits

PasAuthPort

Minimum surface the SDK refresh flow needs from PAS.