policy/

package applicationlimits owns validation shared by control and publishers.

Package authorization authorizes control operations and builds stable request hashes.

package httpsubject names the authorization boundary of an HTTP frontend.

package ippolicy verifies allowed CIDRs without exposing their network addresses.

package publisherprovenance validates publisher-reported deployment metadata.

package target validates target origins and path prefixes without network I/O.

package tcptarget validates the TCP target address used by a publisher.

package trafficlimits defines process-local encrypted visitor traffic budgets.

package visitorsubject converts the tagged visitor principal at HTTP boundaries.