Experimental
Dynamic policy for the canonical claimed/observed/effective evaluator.
Optional
Readonly
Optional allow-list. An omitted list allows every evidence-supported entry.
Explicit deny-list. Denial wins when an id appears in both lists.
Dynamic policy for the canonical claimed/observed/effective evaluator.