Enum TrifectaVerdict 

pub enum TrifectaVerdict {
    Ok,
    RefusedTrifecta,
    AllowedWithWarning,
}

The verdict on a grant’s trifecta exposure. A refusal is never a crash — each caller turns it into an outcome its layer can act on:

• TrifectaVerdict::Ok — two legs or fewer; the grant proceeds silently.
• TrifectaVerdict::RefusedTrifecta — all three legs and no override. Config validation reports it as a startup error; the subagent.run tool returns an error result the parent’s model can act on by splitting the work across two narrower children.
• TrifectaVerdict::AllowedWithWarning — all three legs, but the operator set security.allow_trifecta, so the grant proceeds.

This mirrors RuleOfTwo (Ok/Warn/Refuse) with self-describing names for the grant path; both sit on the same Trifecta budget.

Variants

Ok

≤2 legs — the Rule of Two holds; grant silently.

RefusedTrifecta

All three legs and no --allow-trifecta — the grant is refused.

AllowedWithWarning

All three legs but --allow-trifecta downgrades the refusal to a loud, auditable warning.

Implementations

impl TrifectaVerdict

pub fn is_refused(self) -> bool

Whether the grant must be blocked at the chokepoint. Only TrifectaVerdict::RefusedTrifecta blocks; a warning still proceeds.

Trait Implementations

impl Clone for TrifectaVerdict

fn clone(&self) -> TrifectaVerdict

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrifectaVerdict

impl Debug for TrifectaVerdict

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TrifectaVerdict

impl PartialEq for TrifectaVerdict

fn eq(&self, other: &TrifectaVerdict) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TrifectaVerdict