Module policy 

Structs

CallerSnapshot 🔒

Caller authenticated identity snapshot returned by MCP auth guards. Captured once at auth time; subsequent response filtering / push subscriber registration / visibility uses this snapshot rather than re-resolving from Bearer/startup (防 SIGHUP reload race / drift between auth decision and side effect).

Enums

EarlyTradeScopeDecision 🔒

Pure decision logic for early trade-scope check.

Functions

audit_reject_with_context 🔒

decide_early_trade_scope 🔒

http_bearer_token 🔒

Extract HTTP Authorization: Bearer <token> from rmcp RequestContext.

mcp_audit_context 🔒

Build the audit correlation context for one MCP JSON-RPC request.

outcome_key_id_from_snapshot 🔒

Compute the audit key id from the same snapshot used by the write precheck. This prevents SIGHUP reload between daemon dispatch and audit emission from re-attributing an outcome to the startup key or <none>.

scope_label 🔒

Scope enum -> human-readable label for early-reject error messages.