Struct ContainmentDecision 

pub struct ContainmentDecision { /* private fields */ }

A session’s containment, decided once: the tier its commands run on and the class that tier achieves for this capsule.

Every reader of a session’s class or tier takes it from here — the floor refusal, the ScopeReport (and so --explain-scope and session_start), the /tmp mapping, the MURMUR.md exec facts, the tier ShellEnforcement installs, the resource plane’s and peer handoff’s symlink rule, mur doctor and the escape-conformance harness — so no report can name a class or tier the session’s commands do not run under.

Implementations

impl ContainmentDecision

pub fn declared(&self) -> ContainmentClass

The combined declared floor the decision was made for.

pub fn achieved(&self) -> ContainmentClass

The class this session’s commands run under.

pub fn host_containment(&self) -> ContainmentClass

The class the host could back for a capsule declaring sealed, with no capsule-side cap. Reported only; nothing decides from it.

pub fn enforcement_tier(&self) -> &'static str

The wire name of the tier this session installs, as ScopeReport::enforcement_tier spells it.

Trait Implementations

impl Clone for ContainmentDecision

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ContainmentDecision

impl Debug for ContainmentDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ContainmentDecision

impl PartialEq for ContainmentDecision

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ContainmentDecision