Interface type for permission evaluation. Declares IPermissionEvaluator with a single method Explain that maps an ActorIdentity and permission string to a PermissionExplanation. No implementation provided; used as a boundary between host identity and engine-independent policy evaluation.
namespace SboxSuperuser.Engine.Permissions;
// T05 boundary: bridge host identity to engine-independent policy evaluation.
// Unknown permissions deny; this declaration supplies no default implementation.
internal interface IPermissionEvaluator
{
PermissionExplanation Explain( ActorIdentity actor, string permission );
}