Module engine

Structs§

CompositeEngineConfig: Configuration for a composite engine that evaluates the built-in rules with one engine and caller-supplied external rules with another.
EngineConfig
ExternalRuleSource: A pre-read rule file provided by the caller (custom Rego/CEL or Guard DSL).
ValidateConfig

build_rule_list
catch_panics: Runs operation, converting any unwinding panic into an error produced by on_panic instead of letting it escape into the caller. Every embedding boundary routes through this guard, so an internal invariant violation on adversarial input becomes a structured, catchable error rather than crashing or trapping the host.
extract_diagnostics: Parses a JSON array of rule outputs, appending a Diagnostic for each element. The array iteration and per-element parsing live in [extract_diagnostics_from_value]; this entry point only turns the string into a value first.
make_resource_diagnostic
make_resource_diagnostic_at_source: Builds a resource diagnostic whose public property path and source-span anchor differ. Scenario-aware rules use this when an effective path maps to an authored intrinsic branch.
semantic_model_to_input_json
validate_bytes_with_path
validate_catching_panics: Convenience wrapper over catch_panics for the core validation flow: a panic becomes a structured ValidationError::Engine carrying the message.