Modules
Generic PARC (Principal, Action, Resource, Context) authorization contract, independent of any policy framework.
The PARC evaluation engine: run an ordered list of Parc.RequestPreparer steps
over a Parc.Request, then hand the prepared request to the Parc.PolicyDecider
and return its verdict. Framework-agnostic: a host adapter builds the request
from its own representation and calls run/3; the same declared pipeline serves
every entry point.
The decision point (PDP) of a PARC authorization. A decider receives a fully
enriched Parc.Request and returns one of
The PARC (Principal, Action, Resource, Context) authorization request: the data a
Parc.PolicyDecider decides on. An adapter builds it, the declared preparers
transform it, and the decider evaluates it.
A preprocessing step in a Parc.Pipeline. A preparer reads a Parc.Request
and either continues with a (possibly transformed) request or aborts the whole
evaluation with an error. It runs before the decider and cannot decide; only
Parc.PolicyDecider returns a verdict.