Enum ActionTier 

pub enum ActionTier {
    Read,
    Write,
    Execute,
    Destructive,
    External,
}

Authorization tier — used both as the principal’s authorization level and as the tier required by an action. Ordered so >= answers “does this principal’s tier satisfy the action’s required tier?”.

Per-tier policy (requires_confirmation, default_timeout) mirrors VISION §6 (human in the loop): each tier maps to a distinct approval ceremony. Read/Write/Execute are auto-approved (with audit recording); Destructive and External block on explicit human approval.

Examples

use brainos_identity::Tier;

// Tiers are ordered by escalating risk.
assert!(Tier::Read < Tier::Write);
assert!(Tier::Execute < Tier::External);

// Only the top two tiers block on explicit human approval.
assert!(!Tier::Execute.requires_confirmation());
assert!(Tier::Destructive.requires_confirmation());

Variants

Read

Read-only — never requires confirmation.

Write

Write — implicit confirmation, user can undo.

Execute

Execute — sandboxed, reversible.

Destructive

Destructive — explicit approval required.

External

External — explicit approval + credential audit.

Implementations

impl Tier

pub fn requires_confirmation(self) -> bool

Whether this tier requires explicit confirmation before execution.

pub fn default_timeout(self) -> Duration

Default approval timeout for this tier.

These are kept humane (tens of seconds, not minutes): an interactive user answers in seconds, and the non-interactive CLI now fast-fails an unanswerable gate (W1) instead of blocking to the deadline, so a long server timeout only ever punished people. Destructive gets the most breathing room because an irreversible action deserves a beat of consideration; Read the least because it barely warrants a pause.

Trait Implementations

impl Clone for Tier

fn clone(&self) -> Tier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Tier

impl Debug for Tier

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Tier

fn deserialize<__D>( __deserializer: __D, ) -> Result<Tier, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Tier

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Tier

impl Hash for Tier

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Tier

fn cmp(&self, other: &Tier) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Tier

fn eq(&self, other: &Tier) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Tier

fn partial_cmp(&self, other: &Tier) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Tier

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Tier