Module iam_policy 

IAM-aware policy enforcement for Nevis role-to-permission mapping. Evaluates tool and workspace access based on Nevis roles using a deny-by-default policy model. All policy decisions are audit-logged.

Structs

IamPolicy

IAM policy engine that maps Nevis roles to ZeroClaw tool permissions. Deny-by-default: if no role mapping grants access, the request is denied.

RoleMapping

Maps a single Nevis role to ZeroClaw permissions.

Enums

PolicyDecision

Result of a policy evaluation.