Struct EgressAllowlistGuard 

pub struct EgressAllowlistGuard { /* private fields */ }

Guard that controls network egress via domain allowlist.

By default, only well-known AI API and package registry domains are allowed. All other egress is denied (fail-closed).

Implementations

impl EgressAllowlistGuard

pub fn new() -> Self

pub fn with_lists( allow: Vec<String>, block: Vec<String>, ) -> Result<Self, EgressAllowlistConfigError>

pub fn is_allowed(&self, domain: &str) -> bool

Trait Implementations

impl Default for EgressAllowlistGuard

fn default() -> Self

Returns the “default value” for a type.

impl Guard for EgressAllowlistGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request.