Struct Policy 

pub struct Policy {
    pub security: SecurityPolicy,
    pub resources: ResourcePolicy,
    pub execution: ExecutionPolicy,
    pub compliance: CompliancePolicy,
}

Policy configuration for cleanroom testing

Fields

security: SecurityPolicy

Security policy

resources: ResourcePolicy

Resource policy

execution: ExecutionPolicy

Execution policy

compliance: CompliancePolicy

Compliance policy

Implementations

impl Policy

pub fn new() -> Self

Create a new policy with default values

pub fn with_security_level(security_level: SecurityLevel) -> Self

Create a policy with custom security level

pub fn with_resource_limits( max_cpu_percent: f64, max_memory_bytes: u64, max_disk_bytes: u64, ) -> Self

Create a policy with custom resource limits

pub fn locked() -> Self

Create a locked-down policy with maximum security

pub fn high_security() -> Self

Create a high security policy

pub fn standard() -> Self

Create a standard security policy

pub fn low_security() -> Self

Create a low security policy

pub fn with_network_disabled(self) -> Self

Disable network access

pub fn with_network_isolation(self, enable: bool) -> Self

Set network isolation

pub fn allows_network(&self) -> bool

Check if network access is allowed

pub fn validate(&self) -> Result<()>

Validate policy configuration

pub fn is_operation_allowed( &self, _operation: &str, context: &HashMap<String, String>, ) -> Result<bool>

Check if operation is allowed by policy

pub fn to_env(&self) -> HashMap<String, String>

Get environment variables for policy enforcement

pub fn summary(&self) -> String

Get policy summary

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Policy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Policy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Policy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.