Struct SecurityConfig 

pub struct SecurityConfig {
    pub profile: Option<String>,
    pub profiles: BTreeMap<String, PostureOverrides>,
    pub overrides: PostureOverrides,
    pub projects: BTreeMap<String, ProjectPostureOverride>,
}

The raw [security] config section as written in boatramp.cfg (RON).

Fields

profile: Option<String>

Selected profile: a built-in (multi-tenant / single-tenant / dev) or a name defined under profiles. Default multi-tenant.

profiles: BTreeMap<String, PostureOverrides>

Operator-defined custom profiles: name → overrides over the strict baseline.

overrides: PostureOverrides

Individual knob overrides applied over the selected profile (these win).

projects: BTreeMap<String, ProjectPostureOverride>

Per-project overrides (Gap 4a) of the tenancy/capability sub-knobs — project name → override. Layered over the resolved fleet posture for that project only; every other project (and every non-tenancy knob) uses the fleet posture. Lets a shared, multi-project serve process run e.g. a strict-isolation production project alongside a looser preview project.

Implementations

impl SecurityConfig

pub fn resolve(&self) -> Result<SecurityPosture, SecurityError>

Resolve the configured profile + overrides into a concrete posture.

pub fn explain(&self) -> Result<String, SecurityError>

Render the resolved posture with each knob’s value and source (the profile preset vs an explicit override), for boatramp security explain.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

where SecurityConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.