RequestContextProvider wiring the approval store into the DO runner:
pass as init()'s / RunnerRuntimeOptions' requestContextForRun. Part of the
trusted computing base — it writes the breakwater grant key.
Takes a TENANT-BOUND store (the brand): a DO builds it as
factory.forTenant(this.tenantId) from its own identity. A
SystemApprovalStore is not assignable here — the type-level assertion in
grants.test.ts pins that.
RequestContextProvider wiring the approval store into the DO runner: pass as init()'s / RunnerRuntimeOptions' requestContextForRun. Part of the trusted computing base — it writes the breakwater grant key.
Takes a TENANT-BOUND store (the brand): a DO builds it as
factory.forTenant(this.tenantId)from its own identity. A SystemApprovalStore is not assignable here — the type-level assertion in grants.test.ts pins that.