Application Security Descriptor File (xs-security.json)

The concept name was not provided (marked as "undefined"), and the supplied source snippets cover several distinct topics — including role collections, token policy configuration, redirect URIs, and principal propagation — without a single unifying concept that can be reliably identified and defined. A precise, source-grounded definition cannot be written without knowing which specific concept is intended.