Struct Security 

pub struct Security {
    pub allow_trifecta: bool,
    pub tls_ca: Option<String>,
    pub aauth: Option<AAuth>,
    pub cgroup: Cgroup,
    pub exec: Exec,
    pub workflows: WorkflowSecurity,
    pub egress: Egress,
    pub policies: Vec<Policy>,
}

Fields

allow_trifecta: bool

tls_ca: Option<String>

aauth: Option<AAuth>

cgroup: Cgroup

exec: Exec

workflows: WorkflowSecurity

egress: Egress

closed ⇒ an outbound MCP dial whose URL matches no services: catalog entry is refused: at boot for configured servers, and at dial time for everything else, so a URL assembled at runtime is caught too. Default open.

policies: Vec<Policy>

Ordered verdicts on the tool CALL — by name, tag, caller, principal or arguments. First match wins; no match is allow.

This is the only place an argument can be judged: grants are name patterns, so “delete anything outside /tmp” has no expression in them, and agent.approval only decides whether to honour a gate the MODEL asked for. It is also where the trifecta tags finally do work at runtime rather than only folding at startup.

Trait Implementations

impl Clone for Security

fn clone(&self) -> Security

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Security

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Security

fn default() -> Security

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Security

where Security: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Security

fn eq(&self, other: &Security) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Security