Struct WorkloadGate 

pub struct WorkloadGate { /* private fields */ }

Governance gate for workload actions.

Implementations

impl WorkloadGate

pub fn new( risk_threshold: f64, human_approval: bool, revocations: Arc<RevocationList>, ) -> Self

Gate with the shipped default_rules and no permits (denies all), checking revocations on every request. The list is required: a gate built without one never denies a revoked package. A gate that genuinely has no subject list says why with Self::exempt.

pub fn exempt( risk_threshold: f64, human_approval: bool, why: &'static str, ) -> Self

Self::new without a revocation list, for a gate whose workloads are not revoked through the subject list (the project supervisor: project certificates revoke through the project identity record) and for tests. why is kept and shown by Self::exempt_reason; the population test allows this only in a short list of files.

pub fn with_rules( risk_threshold: f64, human_approval: bool, rules: Vec<GovernanceRule>, revocations: Arc<RevocationList>, ) -> Self

Gate over a distributed rule set (e.g. RuleDistribution::active_rules) checking revocations.

Only rules whose selectors can match workload.* actions matter; the rest are carried but never match.

pub fn exempt_reason(&self) -> Option<&'static str>

Why this gate does not check the subject revocation list, if it does not.

pub fn with_permit(self, rule: WorkloadPermitRule) -> Result<Self, String>

Add a permit rule after validating it.

pub fn with_chain(self, cm: Arc<ChainManager>) -> Self

Attach a chain manager for audit events.

pub fn with_revocations(self, list: Arc<RevocationList>) -> Self

Replace the revocation list checked on every request (an exempt gate becomes one that checks it).

pub fn with_attestation(self, att: ProjectAttestation) -> Self

Decide for the verified project att instead of the kernel’s instance attestation. Permit rules with projects match on it.

pub fn permits(&self) -> &[WorkloadPermitRule]

Permit rules in evaluation order.

Trait Implementations

impl GateBackend for WorkloadGate

fn check(&self, agent_id: &str, action: &str, context: &Value) -> GateDecision

Check whether an agent is allowed to perform an action.

fn check_teardown( &self, agent_id: &str, action: &str, context: &Value, ) -> GateDecision

Self::check for a teardown (stop / unload / re-adoption of what is already placed): a denial caused only by the node’s trust tier is waived, every other denial (revocation, default deny, rule or threshold) stands. Gates that cannot tell the difference return the plain decision, so they never waive anything.

fn governance_snapshot(&self) -> Option<GovernanceSnapshot>

The rules and settings this gate evaluates with, when it is backed by a governance engine. The user daemon exports it as the signed parent policy for its project kernels (ADR-103 D8). None for gates with no rule set.