Struct FleetSecurityPolicy 

pub struct FleetSecurityPolicy {
    pub default_trust_level: FleetTrustLevel,
    pub allowed_secrets: Vec<FleetSecretRef>,
    pub capability_grants: Vec<FleetCapabilityGrant>,
    pub max_trust_level: FleetTrustLevel,
    pub require_identity_verification: bool,
    pub allow_parallel_reads: bool,
}

Security policy applied to a fleet run.

A policy defines the default trust level for workers, which secrets may be resolved, and what capabilities are granted. When a run has no explicit policy, workers inherit conservative defaults.

Fields

default_trust_level: FleetTrustLevel

Default trust level for workers that don’t declare one explicitly.

allowed_secrets: Vec<FleetSecretRef>

Secret refs that workers may resolve. An empty list means no secrets are available. Each entry is a key name, not a value.

capability_grants: Vec<FleetCapabilityGrant>

Capability grants for workers in this run.

max_trust_level: FleetTrustLevel

Maximum trust level any worker in this run may have, even if the worker spec requests higher. Defaults to Operator (no ceiling).

require_identity_verification: bool

Require identity verification for remote workers. When true, SSH workers must pass host-key verification before being trusted at RemoteVerified level; unverified remotes stay at Sandbox.

allow_parallel_reads: bool

Allow conservative parallel execution of read-only tools (#2983). When true, workers may batch independent read-only tool calls (reads, searches, greps) into concurrent turns. Disabled by default to avoid overwhelming providers or hitting rate limits.

Trait Implementations

impl Clone for FleetSecurityPolicy

fn clone(&self) -> FleetSecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FleetSecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for FleetSecurityPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for FleetSecurityPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for FleetSecurityPolicy

impl PartialEq for FleetSecurityPolicy

fn eq(&self, other: &FleetSecurityPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FleetSecurityPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FleetSecurityPolicy