AuthorizationService and purpose validation, built on the InvestigationContext type core already carries. Empty until task 03.