Struct CapabilityGovernance 

pub struct CapabilityGovernance {
    pub rules_engine: String,
    pub enforced_actions: Vec<String>,
    pub bypass_impossibility_tests: u32,
    pub l1_6_attest: bool,
}

v0.7.0 L3-5 — substrate-rules governance capability surface.

Surfaces the L1-6 activation posture honestly:

• rules_engine: "operator_signed" because the L1-6 loader refuses to honour any enabled = 1 rule that is not attest_level = 'operator_signed' and whose signature does not verify against the active operator pubkey (crate::governance::rules_store L1-6 audit).
• enforced_actions: the actual variant set in crate::governance::agent_action::AgentAction minus the Custom extension point (extension points are not substrate-enforced). v0.7.0 ships four action kinds at the harness-mediated PreToolUse boundary.
• bypass_impossibility_tests: count of #[test] functions in [tests/governance_l16_activation.rs] verifying the bypass-impossibility properties (signature-required, tampered-sig rejected, direct-enabled-flip rejected, keygen 0600, idempotent sign-seed, rotated-key invalidates). The number reflects the test file as of v0.7.0 — bumping it requires an audit pass and a matching test addition.

Fields

rules_engine: String

enforced_actions: Vec<String>

bypass_impossibility_tests: u32

l1_6_attest: bool

v0.7.0 SEC-2 (Cluster D, issue #767) — true when an operator pubkey is resolved (env var or ~/.config/ai-memory/operator.key.pub) AND therefore the L1-6 loader is in attest-enforcing mode (every enabled = 1 row MUST be operator-signed to fire). false when the substrate is in pre-L1-6 / fail-OPEN compat mode — every enabled rule passes through without signature verification.

Clients that need to display the deployment’s enforcement posture (operator dashboard, MCP-inspect tool, capabilities summary) can render this flag verbatim. Defaults to false for envelopes serialised before SEC-2 to preserve wire compatibility.

Implementations

impl CapabilityGovernance

pub fn current() -> Self

Build the L3-5 governance capability from the live constants.

Trait Implementations

impl Clone for CapabilityGovernance

fn clone(&self) -> CapabilityGovernance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityGovernance

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapabilityGovernance

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapabilityGovernance

impl PartialEq for CapabilityGovernance

fn eq(&self, other: &CapabilityGovernance) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CapabilityGovernance

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapabilityGovernance