Enforcement gate configuration.
The ACL check function (wraps @kehto/acl or legacy aclStore)
Maps pubkey to full identity (dTag, aggregateHash)
Optional audit callback. Called on every enforce() check with the identity, capability, and decision.
Optional
Enforcement gate configuration.
Param: checkAcl
The ACL check function (wraps @kehto/acl or legacy aclStore)
Param: resolveIdentity
Maps pubkey to full identity (dTag, aggregateHash)
Param: onAclCheck
Optional audit callback. Called on every enforce() check with the identity, capability, and decision.