//! Security layer: identity of the calling window, module permissions and URL policies.
//!
//! Tauri capabilities already restrict which window class may reach which command; this
//! layer re-checks every call in Rust (defence in depth), mirroring the Electron 0.1.0
//! sender/frame checks of `registerCoreIpc.js` and the per-plugin context of `pluginRuntime.js`.

pub mod caller;
pub mod url_policy;