Interface AuthorizationDecisionObservation

One observed authorization decision, as the RBAC source retains it (M98h).

The record describes the evaluation that PRODUCED the returned boolean — it is never a replay. id is an opaque, per-source sequential d<N> identifier carrying no rule or principal identity. result is the authoritative decision the service returned. ruleAliases is the COMPLETE requested rule set, de-duplicated in first-requested order (so at most 128 entries) — every one of them approved, or the whole decision was dropped before buffering — while steps holds at most 16 EVALUATED steps: a single check carries exactly one, a compound carries one per input actually evaluated, and unevaluated compound branches have no step at all. stepsEvaluated is the TRUE evaluated count (saturating) and stepsTruncated is true exactly when the evaluation ran more than 16 steps — a decision that evaluated exactly 16 is complete and reports false, so a consumer can never mistake a full list for a truncated one. viaRoleAlias is the approved alias of the granting role, when the decision was granted through a single identifiable one. The observation carries no principal, request, route, credential, claim, resource, raw rule, error, or arbitrary detail field.