Module render 

Human rendering of audit records. Pure: takes data, returns a String.

Kept free of tracing and of I/O so every output shape is unit-testable.

Structs

Rollup

Accumulated allows for one tool call, grouped by (cap_id, action, rule).

SpanFields

The envelope-span fields the layer captures at span open and completes at span close.

Functions

render_credential_issue

One credential handed to a component. Printed the moment it resolves and never folded into a rollup: an operator scanning a run for “what got out” must find one line per issue, not a count.

render_declared_ask_blocked_warning

A sibling warning for a declared class configured as ask when this run has no interactive prompt channel at all (headless / ACT-HTTP). The header still shows the configured mode (ask) unchanged — that really is the policy — but every access to a class like this resolves through DenyPrompter before a human is ever asked, so the operator needs the outcome spelled out, not just the mode.

render_declared_ungranted_warning

A second line, printed right after the header, naming capability classes the component declared in act.toml that resolved to deny anyway (no grant covered them, or an operator explicitly denied them). Restricted to declared == true classes by the caller — every class a component never asked for also resolves to deny, and warning on those would bury the one signal an operator actually needs to see.

render_exception

A denial or an ask — printed the moment it resolves, never batched. Also reused (from the layer) for an allow that has nowhere to fold, e.g. one fired at instantiation time, before any tool-call span exists.

render_header

The instantiation header: what is running and under what modes.

render_rollup

The per-call summary, flushed when the envelope span closes.