Function mint_authorized_session 

pub fn mint_authorized_session(
    signer: &SessionSigner,
    session_id: &str,
    authorization_epoch: u64,
    subject: &SessionSubject,
    scopes: &[SessionScope],
    now_ms: u64,
    ttl_ms: u64,
) -> String

Mints a signed bearer bound to the durable record State already accepted.

The caller obtains session_id and authorization_epoch from the exact State mint command/receipt before signing. This function never invents either authority fact and performs no storage I/O.

Panics

Panics for an empty session identity or scope set; neither can represent an authorizable bearer.