Module principal 

The authenticated subject — the single Principal every gateway/RPC/ACP connection carries once an crate auth provider has verified a credential.

Structs

AgentAlias

An agent alias a principal may bind at session start. Newtype so it never gets confused with an arbitrary String in grant checks.

Principal

PrincipalId

Stable, opaque subject id. The audit Actor, the approval-routing key, the provenance origin, and (A2A) the peer join key. For an OIDC user this equals the IdP sub; for the shared-bearer / trusted-local path it is the sentinel PrincipalId::SHARED_OPERATOR.

Enums

AuthMethod

AuthOutcome

The single result every auth surface returns. Misroute/timeout/malformed ⇒ AuthOutcome::Denied, NEVER a silent allow.

DenyReason

Why a credential was rejected. Fail-closed: any ambiguity ⇒ a Denied variant, never a silent allow.