act_policy/decision.rs
1//! The common policy decision returned by every capability provider.
2
3/// The verdict for one capability operation, shared across all classes
4/// (filesystem, http, sockets, and generic/semantic providers).
5#[derive(Debug, Clone, Copy, PartialEq, Eq)]
6pub enum Decision {
7 /// Permitted.
8 Allow,
9 /// Refused.
10 Deny,
11 /// In-ceiling but `ask` mode: defer to interactive consent. The sync
12 /// classifier never prompts; the async caller (e.g. `fs_policy::check_path`)
13 /// resolves this through the `DecisionCache` / `ConsentPrompter`.
14 Ask,
15}