/// RBAC Module: Access control with OIDC + Vault policies
///
/// Phase 7 implementation: universal authentication + authorization
/// Depends on Authentik (OIDC) + Vault (policy files)

pub mod policy_provider;
pub mod access_checker;

pub use policy_provider::{AccessPolicy, PolicyProvider, VaultPolicyProvider, MockPolicyProvider};
pub use access_checker::{
    AccessDecisionEngine, AccessChecker, AccessLevelChecker, RoleChecker, PermissionChecker,
    AuditLogger, AccessDecision,
};