Enum AllowOutOfRoot 

pub enum AllowOutOfRoot {
    Confined,
    All,
    Selective {
        kinds: HashSet<String>,
        rules: HashSet<String>,
    },
}

Which rules may read a config-declared path that escapes the repo root — the parsed form of the top-level allow_out_of_root: key. Default Confined (hard confinement, the secure default). Honored only from the user’s own top-level config; the loader rejects it from any extends:’d ruleset (the same trust model as the spawning-rule gate). See docs/design/v0.12/allow_out_of_root.md.

YAML forms: true (all rules), or { kinds: [...], rules: [...] } (a rule is permitted if its kind or id is listed). Absent / false → Confined.

Variants

Confined

No rule may read outside the repo root (default).

All

Every rule may (allow_out_of_root: true).

Selective

Only rules whose kind ∈ kinds or id ∈ rules may.

Fields

kinds: HashSet<String>

rules: HashSet<String>

Implementations

impl AllowOutOfRoot

pub fn allows(&self, id: &str, kind: &str) -> bool

Whether a rule with this id / kind may read out of root.

pub fn is_confined(&self) -> bool

true when nothing is permitted (the default). The extends: trust gate rejects an inherited ruleset whose value is not this.

Trait Implementations

impl Clone for AllowOutOfRoot

fn clone(&self) -> AllowOutOfRoot

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AllowOutOfRoot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AllowOutOfRoot

fn default() -> AllowOutOfRoot

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AllowOutOfRoot

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Eq for AllowOutOfRoot

impl PartialEq for AllowOutOfRoot

fn eq(&self, other: &AllowOutOfRoot) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AllowOutOfRoot