Struct CodeExecutionGuard 

pub struct CodeExecutionGuard { /* private fields */ }

Guard that enforces CodeExecutionConfig policies against ToolAction::CodeExecution calls.

Implementations

impl CodeExecutionGuard

pub fn new() -> Self

Build a guard with default configuration. Never fails because the default patterns are known-valid regex fragments.

pub fn with_config( config: CodeExecutionConfig, ) -> Result<Self, CodeExecutionError>

Build a guard with explicit configuration. Returns an error when any entry in module_denylist is not a valid literal identifier (we build word-boundary regexes from the literal).

Trait Implementations

impl Default for CodeExecutionGuard

fn default() -> Self

Returns the “default value” for a type.

impl Guard for CodeExecutionGuard

fn name(&self) -> &str

Human-readable guard name (e.g., “forbidden-path”).

fn evaluate(&self, ctx: &GuardContext<'_>) -> Result<Verdict, KernelError>

Evaluate the guard against a tool call request.