Module layered_authorization 

Layered ingress and detailed authorization contracts. Runtime-neutral contracts for staged authorization.

Enums

AuthorizationDecision

Final authorization decision returned by a policy layer.

AuthorizationDenial

Closed, non-sensitive reasons for rejecting an authorization request.

DetailedDecision

The result of a detailed authorization policy evaluation.

IngressDecision

The coarse ingress decision made before authentication or detailed policy evaluation.

LayerFailureKind

A fail-closed category for a layer that could not return a decision.

LayerRequirement

Whether a detailed authorization decision is required for a request path.

Traits

IngressPolicy

A coarse ingress policy that can inspect a request without authenticating it.

Functions

combine_layered_authorization

Combines coarse ingress and detailed authorization under fail-closed semantics.

Type Aliases

LayerEvaluation

The result returned by one authorization layer.