Struct Denial 

pub struct Denial {
    pub kind: DenialKind,
    pub target: String,
    pub reason: String,
}

One structured leash denial recorded by the in-process interceptor.

This is the structured security signal that replaces stderr string-matching: a denial is present here only when the interceptor actually decided Deny, never merely because a permitted command exited non-zero on its own.

Fields

kind: DenialKind

Whether an exec (spawn), an open (file), or a net egress was refused.

target: String

The exact target the interceptor saw: the program (e.g. rm, /bin/rm) for an exec denial, the path for an open denial, or the CONNECT host (e.g. github.com) for a net denial (#196).

reason: String

The human-readable reason from the leash (safe to surface to an agent).

Trait Implementations

impl Clone for Denial

fn clone(&self) -> Denial

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Denial

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Denial

fn deserialize<__D>( __deserializer: __D, ) -> Result<Denial, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for Denial

impl PartialEq for Denial

fn eq(&self, other: &Denial) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Denial

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Denial