agentmesh 4.0.0

Public Preview — Rust SDK for the Agent Governance Toolkit (policy, trust, audit, identity)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

# Wire-protocol-aware policy rules (Rust SDK)
#
# Mirrors examples/policy-templates/wire-protocol-rules.yaml from the Python
# SDK. Load with PolicyEngine::load_from_yaml(yaml_str).
version: "1"
agent: "did:example:agent1"
policies:
  # ── SQL ─────────────────────────────────────────────────────────────────
  - name: deny-destructive-sql
    type: capability
    denied_actions: ["*"]
    conditions:
      sql.verb: [DROP, TRUNCATE, DELETE]

  - name: deny-schema-changes
    type: capability
    denied_actions: ["*"]
    conditions:
      sql.verb: [ALTER, GRANT, REVOKE]

  - name: deny-writes-to-protected
    type: capability
    denied_actions: ["*"]
    conditions:
      sql.target: protected

  # ── Kubernetes ──────────────────────────────────────────────────────────
  - name: deny-k8s-production-namespace
    type: capability
    denied_actions: ["*"]
    conditions:
      k8s.namespace: production

  - name: deny-k8s-exec
    type: capability
    denied_actions: ["*"]
    conditions:
      k8s.subresource: exec

  - name: deny-k8s-deletecollection
    type: capability
    denied_actions: ["*"]
    conditions:
      k8s.verb: deletecollection