pub fn evaluation_request_for_caller(
req: EvaluationRequest,
caller: Option<&AuthenticatedIdentity>,
) -> Result<AgentRequest, EvaluationMappingError>Expand description
Map an HTTP or gRPC request while constraining it to the identity carried by a verified API key. The bound tenant is stored in request/audit metadata, not trusted from caller-controlled Cedar context. It is not a Cedar policy attribute; policy isolation must use trusted entities/context explicitly.