Enum SandboxLayer 

#[non_exhaustive]
pub enum SandboxLayer {
    Governance,
    Environment,
    SudoOverride,
}

Which sandbox layer denied (or allowed) access.

Three enforcement layers are evaluated in order (k3:D12):

1. Governance – gate check with tool name + effect vector context
2. Environment – per-environment allowed-path configuration
3. SudoOverride – elevated agent capability that bypasses environment restrictions (logged to chain, requires sudo flag)

The first Deny short-circuits. SudoOverride can only bypass the Environment layer, never the Governance layer.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Governance

Governance gate check (always authoritative, cannot be overridden).

Environment

Environment-scoped path restrictions (e.g. dev=permissive, prod=strict).

SudoOverride

Elevated override that bypasses environment restrictions. Requires AgentCapabilities::sudo and is always logged to chain.

Trait Implementations

impl Clone for SandboxLayer

fn clone(&self) -> SandboxLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SandboxLayer

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for SandboxLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SandboxLayer

fn eq(&self, other: &SandboxLayer) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SandboxLayer

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for SandboxLayer

impl Eq for SandboxLayer

impl StructuralPartialEq for SandboxLayer