Struct GovernanceGate 

pub struct GovernanceGate { /* private fields */ }

Gate backend wrapping the GovernanceEngine.

Bridges the 5D effect-algebra governance engine into the kernel’s gate slot, mapping GovernanceDecision → GateDecision. Governance events are logged to the exochain when a ChainManager is provided.

Implementations

impl GovernanceGate

pub fn new(risk_threshold: f64, human_approval: bool) -> Self

Create a governance gate with the given risk threshold.

pub fn open() -> Self

Create an open governance gate that permits everything.

pub fn with_eval_rate_limit(self, config: RateLimitConfig) -> Self

Configure per-principal governance-evaluation rate limiting (WEFT-148).

pub fn with_chain(self, cm: Arc<ChainManager>) -> Self

Attach a chain manager for audit logging.

pub fn exempt_action(self, action: impl Into<String>) -> Self

Grant a per-action exemption from the blocking-deny path.

action must match the gate action string exactly (the chat path uses format!("tool.{name}"), so e.g. "tool.agent_spawn"). An exempted action that the engine would deny or escalate is permitted instead, but the decision is still evaluated and witnessed as a governance.grant. Every other action is unaffected; a gate that never calls this is identical to before. Opt-in only — driven by the [kernel.agent.subagents].governance_grant config flag.

pub fn add_rule(self, rule: GovernanceRule) -> Self

Add a governance rule.

pub fn engine(&self) -> &GovernanceEngine

Access the inner governance engine.

pub fn verify_governance_genesis(&self) -> Option<u64>

Verify that the governance genesis event exists on the chain.

Returns the genesis sequence number if found, or None if no chain is attached or no genesis event exists.

Trait Implementations

impl GateBackend for GovernanceGate

fn governance_snapshot(&self) -> Option<GovernanceSnapshot>

The rules and settings this gate evaluates with, when it is backed by a governance engine. The user daemon exports it as the signed parent policy for its project kernels (ADR-103 D8). None for gates with no rule set.

fn check(&self, agent_id: &str, action: &str, context: &Value) -> GateDecision

Check whether an agent is allowed to perform an action.

fn check_teardown( &self, agent_id: &str, action: &str, context: &Value, ) -> GateDecision

Self::check for a teardown (stop / unload / re-adoption of what is already placed): a denial caused only by the node’s trust tier is waived, every other denial (revocation, default deny, rule or threshold) stands. Gates that cannot tell the difference return the plain decision, so they never waive anything.