Enum GateOutcome 

pub enum GateOutcome {
    Allow,
    Reject {
        blocked: HashSet<String>,
        reason: String,
    },
    NeedsApproval {
        actions: HashSet<String>,
        fingerprint: String,
        reason: String,
    },
}

The verdict a single AdmissionGate returns for a proposal.

Variants

Allow

The gate raises no objection. Execution may proceed (subject to the other gates and the normal per-action validation/policy pipeline).

Reject

The gate forbids execution. blocked names the offending action ids (empty means “the proposal as a whole”); reason is the human-readable explanation surfaced on the rejected results and the audit log. A rejected proposal does not run any action — a safety hazard is a property of the action set, not an isolated action, the same stance the transactional pre-check takes.

Fields

blocked: HashSet<String>

reason: String

NeedsApproval

The gate would allow the proposal only with human approval. fingerprint is the stable identity an operator approves/rejects against (so a prior decision sticks); actions names the actions that triggered the escalation.

Until the durable approval transport is wired (A7), the executor treats this as a block with an explanatory reason — fail-closed, never fail-open. A7 replaces that with a real pending-approval that resolves through the permission.* surface.

Fields

actions: HashSet<String>

fingerprint: String

reason: String

Implementations

impl GateOutcome

pub fn reject_all(reason: impl Into<String>) -> Self

Convenience constructor for a whole-proposal rejection.

pub fn reject_actions<I, S>(blocked: I, reason: impl Into<String>) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Convenience constructor for rejecting specific actions.

pub fn is_allow(&self) -> bool

True when this outcome permits execution.

pub fn label(&self) -> &'static str

The serde-stable label for the audit event (allow / reject / needs_approval). Kept as an explicit method rather than Debug so the wire/doc contract is stable.

Trait Implementations

impl Clone for GateOutcome

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GateOutcome

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.