OptionalallowThe host's authentication seam.
Host-specific service assembly, called lazily at most once per request.
OptionaldeploymentInfrastructure-configured deployment tag, never derived from claims.
OptionalnewRun-id generator. Default: crypto.randomUUID.
The deployment approval-store factory.
The same self-decision policy supplied to ApprovalService.