pub fn evaluate_request(
policy: &dyn RequestPolicy,
context: &RequestContext<'_>,
) -> AuthorizationDecisionExpand description
Applies the mandatory fail-closed identity gate before invoking a policy.
A missing principal resolves to AuthorizationDenial::SubjectUnknown
without invoking the policy.