Module authorization_review 

Transport-neutral contracts for bounded authorization differential review.

This module owns no transport, request broker, runtime budget, credential source, or report. It validates one declared policy and two host-supplied principal contexts, captures four raw-value-free JSON views through the existing API visibility comparator, and classifies their relationship.

Structs

AuthorizationDifferentialReceiptId

Stable receipt for one complete four-view comparison invocation.

AuthorizationDifferentialResult

Complete raw-value-free differential receipt.

AuthorizationPrincipalPair

Exactly two distinct, role-bound principal contexts.

AuthorizationPrincipalPairProof

Value-free evidence that a distinct primary/peer pair was checked.

AuthorizationResourceScopeId

Pseudonymous exact selected-resource identity.

AuthorizationReviewPolicy

Strict, bounded policy for one exact-origin JSON resource.

AuthorizationReviewPolicyId

Stable semantic identity of a validated policy.

AuthorizationReviewView

One role-bound response reduced to bounded fingerprints and typed metadata.

AuthorizationViewReceiptId

Scanner-owned response-receipt correlation identity.

DimensionEquivalence

Equivalence result for the three required comparison dimensions.

PeerAuthorizationPrincipal

Host-supplied peer-principal Authorization header value.

PrimaryAuthorizationPrincipal

Host-supplied primary-principal Authorization header value.

Enums

AuthorizationDifferentialError

Internal correlation/comparator failure.

AuthorizationPrincipalError

Static, value-free principal validation failure.

AuthorizationReviewBodyState

Bounded response state supplied by a host/runtime before pure comparison.

AuthorizationReviewExpectation

V1 host-declared relation under review.

AuthorizationReviewMediaClass

Normalized, value-free media classification bound to one response view.

AuthorizationReviewMethod

Read-only method supported by V1.

AuthorizationReviewOutcome

Deterministic non-boolean four-view outcome.

AuthorizationReviewPolicyError

Static, value-free policy validation failure.

AuthorizationReviewViewError

View capture failure with no raw response values.

AuthorizationViewRole

The four independently dispatched views required by V1.

Constants

AUTHORIZATION_REVIEW_ALGORITHM_VERSION

Stable comparison and identity algorithm implemented by this module.

AUTHORIZATION_REVIEW_POLICY_SCHEMA

Purpose-oriented repository policy schema.

HARD_MAX_AUTHORIZATION_REVIEW_DIFF_PATHS

Maximum retained redacted diff paths in V1.

HARD_MAX_AUTHORIZATION_REVIEW_IGNORED_PATHS

Maximum ignored subtrees in V1.

HARD_MAX_AUTHORIZATION_REVIEW_PATH_BYTES

Maximum bytes in one canonical pointer.

HARD_MAX_AUTHORIZATION_REVIEW_POLICY_BYTES

Maximum accepted policy source bytes.

HARD_MAX_AUTHORIZATION_REVIEW_SELECTED_PATHS

Maximum selected subtrees in V1.

HARD_MAX_AUTHORIZATION_REVIEW_UNORDERED_ARRAY_PATHS

Maximum unordered-array paths in V1.