Module capability 

Per-level capability types for fine-grained agent permission control.

A Capability represents a discrete action category that policy can allow or deny. A CapabilitySet aggregates allow and deny sets for a given scope.

Structs

CapabilitySet

Aggregates allow and deny capability sets for a given policy scope.

EffectivePermissions

Effective capability set for a single agent, with cascade provenance.

PermissionSource

Per-scope contribution to an effective permission set.

Enums

Capability

A discrete action category that policy can allow or deny for an agent.

Functions

action_to_capability

Map a crate::GovernanceAction to the Capability it exercises, or None if the action does not map to a known capability.

merge_capabilities

Merge a parent CapabilitySet with a child CapabilitySet using parent-deny-wins semantics.