Expand description
Capability policy decision core (PDP) for ACT hosts.
Pure, synchronous, wasm-portable: resolve computes the effective
ceiling once per instantiation; the matchers classify each operation.
Host-only async consent helpers live behind the host feature.
Re-exports§
pub use decision::Decision;
Modules§
- ceilings
- The per-run ceiling set: one compiled ceiling per capability id.
- consent
- Interactive consent: prompt-on-access for
ask-mode capabilities, with a per-session decision cache and fail-safe (no channel = deny). - decision
- The common policy decision returned by every capability provider.
- effective
- Compute the effective host policy for one component invocation.
- fs_
matcher - Layer 1 phase C1, part 1/2: glob matcher for filesystem policy.
- grant
- Grant and policy config types:
PolicyMode, capability grant shapes, and the per-class config structs produced by the mapper functions. - net
- Network-policy primitives and rule checker. This module is strictly about IPs, hostnames, CIDRs, and ports — it has no HTTP awareness. HTTP adds scheme + method filtering as its own layer before delegating the network-level parts here; upcoming raw TCP/UDP policy will reuse the same rule shape and checker directly.
- provider
- The pluggable capability-decision framework: providers (factories) produce compiled ceilings; a registry maps capability ids to providers.
- providers
- Built-in capability providers (factories) for the ACT policy framework.