Struct LimitsPolicy 

pub struct LimitsPolicy {
    pub max_timeout_secs: u64,
    pub default_timeout_secs: u64,
    pub max_output_bytes: usize,
    pub var_allowlist: Vec<String>,
    pub max_glob_depth: usize,
    pub max_glob_matches: usize,
    pub proxy_max_head: usize,
    pub proxy_conn_timeout_secs: u64,
    pub proxy_bind: String,
    pub audit_sink: Option<String>,
    pub env_denylist: Vec<String>,
}

Shell-tool + egress-proxy limits (shell_tool.rs / net_proxy.rs constants). Anti-drift tests for these land with the wiring PR (#143) where the consts live.

Fields

max_timeout_secs: u64

Max permitted wall-clock timeout, seconds (MAX_TIMEOUT_SECS).

default_timeout_secs: u64

Default timeout when unspecified, seconds (DEFAULT_TIMEOUT_SECS).

max_output_bytes: usize

Captured stdout/stderr cap, bytes (MAX_OUTPUT_BYTES).

var_allowlist: Vec<String>

Env vars expandable in redirect targets (VAR_ALLOWLIST).

max_glob_depth: usize

Max glob nesting depth (MAX_GLOB_DEPTH).

max_glob_matches: usize

Max glob matches (MAX_GLOB_MATCHES).

proxy_max_head: usize

Proxy request-header cap, bytes (MAX_HEAD).

proxy_conn_timeout_secs: u64

Proxy per-connection socket timeout, seconds (CONN_TIMEOUT).

proxy_bind: String

Proxy bind address (loopback ephemeral).

audit_sink: Option<String>

Egress audit sink path (subsumes BRIDLE_NET_AUDIT); None = off.

env_denylist: Vec<String>

AB-004: environment variable names DROPPED before spawning a child, regardless of the exec leash. Loader / interpreter / hook vars (LD_PRELOAD, PYTHONPATH, GIT_SSH_COMMAND, BASH_ENV, …) change what an allowed program actually executes, so they can never be caller-set. Overridable config data (three-Cs).

Trait Implementations

impl Clone for LimitsPolicy

fn clone(&self) -> LimitsPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LimitsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for LimitsPolicy

fn default() -> LimitsPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for LimitsPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<LimitsPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for LimitsPolicy

impl PartialEq for LimitsPolicy

fn eq(&self, other: &LimitsPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for LimitsPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for LimitsPolicy