feat(ql3): establish 3.0 incubation baseline

back/runtime/ports/artifactReadAuthorizer.ts

@@ -0,0 +1,20 @@
+import type { ArtifactReadSubject } from '../domain/artifactRead';
+
+export type ArtifactReadAuthorizationEffect =
+  | 'allow'
+  | 'deny'
+  | 'require_approval';
+
+export interface ArtifactReadAuthorizationRequest {
+  action: 'artifact.read';
+  subject: Readonly<ArtifactReadSubject>;
+  projectId: string;
+  runId: string;
+  logArtifactId: string;
+}
+
+export interface ArtifactReadAuthorizer {
+  authorize(
+    request: Readonly<ArtifactReadAuthorizationRequest>,
+  ): Promise<ArtifactReadAuthorizationEffect>;
+}