Struct WorkflowSecurity 

pub struct WorkflowSecurity {
    pub immutable: bool,
}

Whether the agent may rewrite its own workflows.

Fields

immutable: bool

Refuse workflow.create / .update / .delete at runtime.

Workflows are the agent’s standing instructions — what it does when a schedule fires or a webhook lands, unattended. An agent that can rewrite them can quietly change what happens next time, and the change survives the conversation that caused it. Anywhere a definition is reviewed before it ships — a file in git, a config a deploy applies — self-update is not a feature, it is a hole in that review.

Off by default, because the runtime-created workflow is a real workflow (docs/workflows.md); turn it on and definitions become read-only, from the config and the store, for everyone: the model, a subagent, and an operator over A2A alike. Loading is unaffected — the daemon still reads files, URLs and directories at startup.

Trait Implementations

impl Clone for WorkflowSecurity

fn clone(&self) -> WorkflowSecurity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WorkflowSecurity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WorkflowSecurity

fn default() -> WorkflowSecurity

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for WorkflowSecurity

where WorkflowSecurity: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for WorkflowSecurity

fn eq(&self, other: &WorkflowSecurity) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for WorkflowSecurity