;; lib/acl/facts.sx — EDB fact constructors.
;;
;; Each constructor returns a Datalog fact tuple (a list whose head is the
;; predicate symbol). These are the only shapes lib/acl/engine.sx feeds to
;; lib/datalog/. Phase 1 covers actor/resource/grant/deny.

(define acl-actor (fn (id kind) (list (quote actor) id kind)))

(define acl-resource-fact (fn (id kind) (list (quote resource) id kind)))

(define acl-grant (fn (subj act res) (list (quote grant) subj act res)))

(define acl-deny (fn (subj act res) (list (quote deny) subj act res)))