Struct TileZeroGate 

pub struct TileZeroGate { /* private fields */ }

Gate backend wrapping cognitum_gate_tilezero::TileZero.

Provides three-way Permit/Defer/Deny decisions with Ed25519-signed PermitTokens and blake3-chained WitnessReceipts. Gate events are logged to the kernel chain when a ChainManager is provided.

Implementations

impl TileZeroGate

pub fn new(tilezero: Arc<TileZero>, chain: Option<Arc<ChainManager>>) -> Self

Create a new TileZero gate.

tilezero — a shared TileZero instance (created once at boot, fed with tile reports by the coherence fabric).

chain — optional chain manager for audit logging. When provided, every decision emits a gate.permit, gate.defer, or gate.deny event.

Trait Implementations

impl GateBackend for TileZeroGate

fn check(&self, agent_id: &str, action: &str, context: &Value) -> GateDecision

Check whether an agent is allowed to perform an action.

fn check_teardown( &self, agent_id: &str, action: &str, context: &Value, ) -> GateDecision

Self::check for a teardown (stop / unload / re-adoption of what is already placed): a denial caused only by the node’s trust tier is waived, every other denial (revocation, default deny, rule or threshold) stands. Gates that cannot tell the difference return the plain decision, so they never waive anything.

fn governance_snapshot(&self) -> Option<GovernanceSnapshot>

The rules and settings this gate evaluates with, when it is backed by a governance engine. The user daemon exports it as the signed parent policy for its project kernels (ADR-103 D8). None for gates with no rule set.