Struct EgressAllowlistGuard

Source

pub struct EgressAllowlistGuard { /* private fields */ }

Expand description

Guard that controls network egress via domain allowlist.

By default, only well-known AI API and package registry domains are allowed. All other egress is denied (fail-closed).

Implementations§

Source §

impl EgressAllowlistGuard

Source

pub fn new() -> Self

Source

pub fn with_lists( allow: Vec<String>, block: Vec<String>, ) -> Result<Self, EgressAllowlistConfigError>

Source

pub fn is_allowed(&self, domain: &str) -> bool

Trait Implementations§

Source §

impl Clone for EgressAllowlistGuard

Source §

fn clone(&self) -> EgressAllowlistGuard

Returns a duplicate of the value. Read more

1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

Source §

impl Default for EgressAllowlistGuard

Source §

fn default() -> Self

Returns the “default value” for a type. Read more

Source §

impl Guard for EgressAllowlistGuard

Source §

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

Source §

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<GuardDecision, KernelError>

Evaluate the guard against a tool call request. Read more

Auto Trait Implementations§

§

impl UnwindSafe for EgressAllowlistGuard

Blanket Implementations§

Source §

impl<T> Any for T
where T: 'static + ?Sized,

Source §

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

Source §

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

Source §

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

Source §

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

Source §

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

Source §

impl<T> Borrow<T> for T
where T: ?Sized,

Source §

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

Source §

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source §

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

Source §

impl<T> CloneToUninit for T
where T: Clone,

Source §

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

Source §

impl<T> DynClone for T
where T: Clone,

Source §

fn __clone_box(&self, _: Private) -> *mut ()

Source §

impl<T> From<T> for T

Source §

fn from(t: T) -> T

Returns the argument unchanged.

Source §

impl<T> Instrument for T

Source §

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more

Source §

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more

Source §

impl<T, U> Into for T
where U: From<T>,

Source §

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source §

impl<T> IntoEither for T

Source §

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more

Source §

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more

Source §