SboxSuperuser/Engine/Permissions/IPermissionEvaluator.cs
Interface declaration for a permission evaluator. It defines a single method Explain that takes an ActorIdentity and a permission string and returns a PermissionExplanation. It documents that unknown permissions are denied and that no default implementation is provided.
namespace SboxSuperuser.Engine.Permissions;
// T05 boundary: bridge host identity to engine-independent policy evaluation.
// Unknown permissions deny; this declaration supplies no default implementation.
internal interface IPermissionEvaluator
{
PermissionExplanation Explain( ActorIdentity actor, string permission );
}