Module opa 

OPA authorization-cache admission and error policy.

All deadlines here are milliseconds on the host’s monotonic clock. The kernels compare and add them; that the clock never steps backwards is a host responsibility, discharged by reading a MonotonicClock.

Enums

OpaAuthorizationDecision

Binary authorization result used at the OPA proof boundary.

OpaCacheAdmission

Result of checking one exact-key cache entry.

OpaCacheExpiry

Result of computing a monotonic cache deadline.

Functions

opa_cache_admission

Reuse an entry’s decision only while its deadline is strictly in the future.

opa_cache_expiry

Compute a deadline ttl_ms after now_ms.

opa_error_decision

Map the explicit outage policy without changing successful OPA decisions.