feat(security): register TimeProvider + S18/S19 option knobs (archreview 03/S18,S19)

2026-08-20 09:36:04 -04:00
parent dd7f495432
commit 894444376e
9 changed files with 266 additions and 54 deletions
@@ -108,6 +108,15 @@ public sealed class DataPlaneAuthorizer
    /// </summary>
    public bool Enabled { get; }

+    /// <summary>The clock this gate evaluates key expiry against.</summary>
+    /// <remarks>
+    ///     Exposed so the composition root's wiring can be asserted by reference. The remarks on
+    ///     <c>UserAuthorizationState</c> record what a second, diverging clock costs: every request denied,
+    ///     with a verdict indistinguishable from "no grant matched". One registered singleton threaded into
+    ///     every consumer is the fix, and a test that cannot see which instance landed here cannot pin it.
+    /// </remarks>
+    public TimeProvider Clock => _time;
+
    /// <summary>
    ///     Memoized grant walks for the request-rate seams (#520 stage 6). See
    ///     <see cref="SessionAclDecisionCache"/> for what it is and is not allowed to cache.