Struct PolicyMutationControl 

pub struct PolicyMutationControl<'a> {
    pub ctx: &'a ControlEventCtx<'a>,
    pub ledger: &'a dyn ControlEventLedger,
    pub config: ControlEventConfig,
    pub registry: Option<&'a ConfigRegistry>,
    pub actor: &'a UserId,
    pub eval_ctx: &'a EvalContext,
}

Control-event dependencies for audited IAM policy mutations.

The existing put_policy / delete_policy / attach / detach methods remain unaudited for bootstrap and synthetic GRANT internals. Public mutation surfaces that need evidence pass this context to the *_with_control_events siblings.

Fields

ctx: &'a ControlEventCtx<'a>

ledger: &'a dyn ControlEventLedger

config: ControlEventConfig

registry: Option<&'a ConfigRegistry>

actor: &'a UserId

eval_ctx: &'a EvalContext