From 1353e355efa24f487cd6c596ee76f8e42c01dcda Mon Sep 17 00:00:00 2001
From: Ponchanon Datta Rone <ponchanon.rone@gmail.com>
Date: Tue, 11 Aug 2026 11:18:16 -0500
Subject: [PATCH] feat(authorization): add authorization evaluator

---
 .../Authorization/IAuthorizationEvaluator.cs     | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs

diff --git a/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs b/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs
new file mode 100644
index 0000000..09a5fb2
--- /dev/null
+++ b/src/BuildingBlocks/Security/Authorization/IAuthorizationEvaluator.cs
@@ -0,0 +1,16 @@
+namespace OpenHealthOS.Security.Authorization;
+
+using OpenHealthOS.Contracts.Authorization;
+
+/// <summary>
+/// Evaluates whether an authorization request is allowed.
+/// </summary>
+public interface IAuthorizationEvaluator
+{
+    /// <summary>
+    /// Evaluates the specified authorization context.
+    /// </summary>
+    /// <param name="context">The authorization context to evaluate.</param>
+    /// <returns>The authorization decision.</returns>
+    AuthorizationDecision Evaluate(AuthorizationContextDto context);
+}