Module security 

Canonical tenant policy payloads for authorization. Canonical tenant policy payload shared by admission, replay and readers.

Structs

ActivePolicy

A policy together with the commit that published it.

DataAccessPolicy

Tenant-scoped data-access restrictions applied to query results.

Enums

AuthorizationMode

How strongly a tenant’s data-access policy is enforced.

Constants

ALL_LABELS

The allowedLabels entry that allows every label.

Functions

policy_fingerprint

Stable digest of a policy’s semantic content and enforcement mode.

policy_fingerprint_with_min_count

policy_fingerprint covering a small-count threshold too; equal to it when min_count is 0, so a policy without one keeps its digest.