Enum Capability 

pub enum Capability {
    FileRead,
    FileWrite,
    FileDelete,
    NetworkOutbound,
    NetworkInbound,
    TerminalExec,
    McpTool(String),
    Model(String),
    AgentSpawn,
}

A discrete action category that policy can allow or deny for an agent.

Variants

FileRead

Read access to the filesystem.

FileWrite

Write access to the filesystem.

FileDelete

Delete/unlink access to the filesystem.

A distinct verb from Capability::FileWrite so a policy can allow writes while denying deletes (and vice versa). See AAASM-4103.

NetworkOutbound

Outbound network connections.

NetworkInbound

Inbound network connections.

TerminalExec

Execute commands in a terminal/shell.

McpTool(String)

Use a named MCP tool.

Model(String)

Use a named AI model.

AgentSpawn

Spawn child agents.

Implementations

impl Capability

pub fn is_enforceable(&self) -> bool

Whether declaring this capability in a policy actually governs anything.

A capability is enforceable only if some crate::GovernanceAction maps to it via action_to_capability — otherwise no action ever routes to it, so a declared allow/deny is silently inert and gives the operator a false sense of security (AAASM-4099).

Currently inert (no corresponding action variant): Capability::Model, Capability::NetworkInbound, and Capability::AgentSpawn. This predicate is the single source of truth policy validation uses to warn loudly when a policy references one of them; keep it in lock-step with action_to_capability — when a new action lands that maps to one of these, wire the mapping there and drop it from the inert arm below.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Capability

impl FromStr for Capability

type Err = String

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for Capability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Capability

fn cmp(&self, other: &Capability) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Capability

fn partial_cmp(&self, other: &Capability) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for Capability