Enum ExecApprovalRequirement 

pub enum ExecApprovalRequirement {
    Skip {
        bypass_sandbox: bool,
        proposed_execpolicy_amendment: Option<ExecPolicyAmendment>,
    },
    NeedsApproval {
        reason: String,
        proposed_execpolicy_amendment: Option<ExecPolicyAmendment>,
        proposed_network_policy_amendments: Vec<NetworkPolicyAmendment>,
    },
    Forbidden {
        reason: String,
    },
}

The approval requirement determined by the execution policy engine.

Variants

Skip

Execution is allowed without approval.

Fields

bypass_sandbox: bool

Whether the sandbox should be bypassed for this execution.

proposed_execpolicy_amendment: Option<ExecPolicyAmendment>

Optional proposed policy amendment (e.g., to persist the allowed prefix).

NeedsApproval

Execution is allowed but requires human approval first.

Fields

reason: String

Human-readable reason explaining why approval is needed.

proposed_execpolicy_amendment: Option<ExecPolicyAmendment>

Optional proposed policy amendment that would be applied on approval.

proposed_network_policy_amendments: Vec<NetworkPolicyAmendment>

Proposed network policy amendments that would be applied on approval.

Forbidden

Execution is forbidden by policy.

Fields

reason: String

Human-readable reason explaining why execution is forbidden.

Implementations

impl ExecApprovalRequirement

pub fn reason(&self) -> &str

Returns the human-readable reason for this approval requirement.

pub fn phase(&self) -> &'static str

Returns a short phase label: "allowed", "needs_approval", or "forbidden".

Trait Implementations

impl Clone for ExecApprovalRequirement

fn clone(&self) -> ExecApprovalRequirement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExecApprovalRequirement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ExecApprovalRequirement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ExecApprovalRequirement

impl PartialEq for ExecApprovalRequirement

fn eq(&self, other: &ExecApprovalRequirement) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ExecApprovalRequirement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ExecApprovalRequirement