pub trait PolicyProvider {
// Required method
fn evaluate_policy(
&self,
bundle: &ProofBundle,
context: &VerifierContext<'_>,
) -> Result<bool, String>;
}Expand description
Pluggable evaluator for verifier-local policy (SPEC §17.2).
Evaluated AFTER all cryptographic, temporal, revocation, constraint, and
scope-intersection checks pass. Ok(true) allows; Ok(false) denies with
scope_denied; Err(...) fails closed with policy_error.