Code/SboxSuperuser/Engine/Permissions/IPermissionEvaluator.cs

Interface type for permission evaluation. Declares IPermissionEvaluator with a single method Explain that maps an ActorIdentity and permission string to a PermissionExplanation. No implementation provided; used as a boundary between host identity and engine-independent policy evaluation.

namespace SboxSuperuser.Engine.Permissions;

// T05 boundary: bridge host identity to engine-independent policy evaluation.
// Unknown permissions deny; this declaration supplies no default implementation.
internal interface IPermissionEvaluator
{
	PermissionExplanation Explain( ActorIdentity actor, string permission );
}