OptionalallowThe host's authentication seam.
Host-specific service assembly, called lazily at most once per request.
OptionaldeploymentInfrastructure-configured deployment tag, never derived from claims.
OptionalmutationOptionalnewRun-id generator, which also mints thread ids. Every call must return a value it never returned before in this deployment, because a run id is single-use and a thread id names one thread for the deployment's lifetime. Default: crypto.randomUUID.
The deployment approval-store factory.
The same self-decision policy supplied to ApprovalService.