Skip to main content

evaluate

chio_kernel_core::evaluate

Function evaluate 

Source 
pub fn evaluate(input: EvaluateInput<'_>) -> EvaluationVerdict
Expand description

Primary entry point for the portable kernel core.

Performs in order:

  1. Capability signature / issuer / time-bound verification.
  2. Subject binding (agent_id match).
  3. Portable scope match.
  4. Guard pipeline (fail-closed).

Returns Ok(EvaluationVerdict) for Allow or Deny. An Err is only returned when the underlying verify_canonical machinery reports an internal failure that is not a clean verify-false; semantically this is still a deny at the caller’s level and chio-kernel maps it onto KernelError::Internal.