Vouch request: sylvesterkaczmarek

[sylvesterkaczmarek]

What do you want to work on?

I’d like to contribute to issue #2586. I’m interested in making the path wildcard behaviour consistent so that * only matches within one path segment while ** remains recursive, with the related matcher, ambiguity checks and tests updated accordingly.

Why this change?

The current inconsistency can make policy behaviour harder to reason about and may lead to unexpected authorization outcomes. I think having one clear path-matching model across the relevant policy components would make the system safer and easier to maintain.

Checklist

• I wrote this request myself (not AI-generated)
• I have read CONTRIBUTING.md