-record(policy_defaults, {
    provider_module :: binary(),
    deny_by_default :: boolean(),
    tenant_scoped :: boolean(),
    decision_trace_enabled :: boolean()
}).