OptionalAnonymousPer-visitor session identity (mj_sid) for an anonymous principal.
The caller's user id.
OptionalIsTrue for the shared-Anonymous-user principal of a public-widget guest or anonymous magic-link invitee.
OptionalMagicThe signed per-session scope carried by the caller's token, when any.
What the decision needs to know about the caller (a subset of
UserInfo).