Module bindings 

Whom each policy is bound to: the reach a bot.did.policyBinding record describes, and the index a gate asks before it consults a policy.

A policy says what is refused; a binding says whom it is refused to. Both are deny-only, so the policies applying to an account are the union over every binding that covers it, and a binding covers an account when Coverage::covers says so: the account is a subject, or is admitted beneath one, and is neither excluded nor beneath an excluded account. “Beneath” is the admission tree the server walks; a browser knows only the account it was told about, so it asks with a Boundary of that account alone.

Structs

BindingIndex

Whom each policy in a tree is bound to, by the tree’s own id for it.

Boundary

The chain of principals an account is judged within: the account first, then each principal above it. Empty for a request no account has made yet, which only a binding on the whole server reaches.

Coverage

Whom one binding reaches.