Enforces GrantForge policies inside Kafka 3.7 and later brokers and controllers: an authorizer of Kafka's Authorizer API that checks every request against the service's signed policy snapshot, answers whether a user may act on any resource of a type, shows the policies as read-only ACLs and folds repeated accesses into one audit event. One Java 8 jar with the agent core inside it, for Kafka's libs directory.