Module authz 

Intent mapping, mission narrowing, and AuthZEN PDP (pillar 2).

Maps tool names to business intents, enforces mission constraints, and issues short-lived signed intent tokens per call.

Structs

AuthzAction

Action being evaluated.

AuthzEvalRequest

AuthZEN Access Evaluation request (Authorization API 1.0).

AuthzEvalResponse

AuthZEN evaluation response.

AuthzResource

Resource being acted upon.

AuthzSubject

Subject of an authorization evaluation.

CallerFacts

What the policy decision point knows about the caller.

IntentActor

The acting agent inside an intent token (RFC 8693 act shape).

IntentClaims

Claims inside a signed intent token.

PolicyDecisionPoint

The local policy decision point. Evaluates tool calls against the intent map, the global mission, and every per-agent mission that selects the caller.

TokenSigner

Ed25519 JWT signer for exchange tokens and intent tokens.

Enums

AuthzDecision

Result of an authorization decision.

Constants

INTENT_TOKEN_TYP

JWT typ of intent tokens. A distinct explicit type (RFC 8725 §3.11) keeps a backend from accepting an intent token as an access token: both are signed by the same exchange key and carry the backend as aud.