Enum SandboxKind 

pub enum SandboxKind {
    Landlock,
    Seatbelt,
    AppContainer,
    MinimalRootfs,
    MicroVm,
    None,
}

Which OS-level sandbox actually backs an authorization.

Recorded in every crate::ToolContext and surfaced in every result envelope so callers can tell whether the leash is kernel-enforced or merely advisory.

Variants

Landlock

A real Landlock ruleset is active (Linux). Kernel-enforced.

Seatbelt

A real Seatbelt (sandbox-exec SBPL) profile is active (macOS). Kernel-enforced against the spawned program’s interior.

AppContainer

A real AppContainer token is active (Windows). Kernel-enforced.

MinimalRootfs

A Linux minimal-rootfs mount-namespace jail is active (ADR 0013 D3/D4, agent-bridle#109/#108). The process runs in a pivot_root jail that physically contains only the granted program files, so exec is kernel-confined by identity — no un-granted binary exists to run or to ld.so-trampoline into (ADR 0011 D7’s precondition is now physically true, not asserted) — and the filesystem axes are kernel-confined by the read-only/read-write bind-mounts. Network is not namespaced at this tier, so net stays advisory (never overclaimed). Reserved for the minimal-rootfs mode: a Landlock-only boundary run stays SandboxKind::Landlock (its exec axis is held — ADR 0011).

MicroVm

A Linux Tier-2 micro-VM is active (ADR 0013 D3, ADR 0009 D2, agent-bridle#111): the same minimal rootfs booted as a qemu guest under a separate kernel. Identity is closed as in SandboxKind::MinimalRootfs (only the granted program exists in the guest) and the filesystem is confined by the guest boundary; with no guest network device, egress is impossible — so exec, the fs axes, and net are all kernel-confined, and a guest-kernel compromise is still contained. The strongest tier.

None

No OS-level sandbox — the leash is in-process/advisory only. This is the honest default on a host with no compiled-and-capable backend.

Trait Implementations

impl Clone for SandboxKind

fn clone(&self) -> SandboxKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxKind

impl Debug for SandboxKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxKind

fn default() -> SandboxKind

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxKind

fn deserialize<__D>( __deserializer: __D, ) -> Result<SandboxKind, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxKind

impl PartialEq for SandboxKind

fn eq(&self, other: &SandboxKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxKind

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxKind