Struct SkillCeilingGate 

pub struct SkillCeilingGate { /* private fields */ }

An admission gate that caps a skill-driven proposal’s actions at the skill’s persisted deployment_tier.

NOTE (neo review): this gate holds its OWN RiskClassifier, distinct from the session PermissionGate’s. Both are RiskClassifier::new() defaults today, so they classify identically — but if either side ever installs custom rules, the two classification points can disagree on an action’s tier. If custom rules land, thread ONE shared classifier through both (Arc it) rather than configuring them separately.

Implementations

impl SkillCeilingGate

pub fn new(memgine: Arc<TokioMutex<MemgineEngine>>) -> Self

Build a gate that reads ceilings from memgine’s live skill graph.

pub fn with_classifier(self, classifier: RiskClassifier) -> Self

Override the risk classifier (e.g. with project-specific escalation rules).

Trait Implementations

impl AdmissionGate for SkillCeilingGate

fn name(&self) -> &str

Short stable identifier (e.g. "information_flow", "concurrency") recorded on the audit event so a denial is attributable to a gate.

fn check<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, proposal: &'life1 ActionProposal, _ctx: &'life2 GateContext<'life3>, ) -> Pin<Box<dyn Future<Output = GateOutcome> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Inspect a proposal and return a verdict. Must not mutate shared state — admission runs before the execution snapshot is taken.