Struct ToolRule 

pub struct ToolRule {
    pub name: String,
    pub allow: bool,
    pub requires_approval_if: Option<String>,
}

A single tool rule from the policy tools: map.

Only the fields needed for cross-layer lowering + L7 evaluation are kept on the canonical AST. requires_approval_if is preserved verbatim so the eBPF lowering can extract the path starts_with "…" predicates that map to in-kernel PathPattern deny rules.

Fields

name: String

Tool name (map key), e.g. write_file or the * wildcard.

allow: bool

Whether the tool is permitted.

requires_approval_if: Option<String>

Raw CEL-ish requires_approval_if expression, if present.

Trait Implementations

impl Clone for ToolRule

fn clone(&self) -> ToolRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ToolRule

impl PartialEq for ToolRule

fn eq(&self, other: &ToolRule) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ToolRule