Struct KernelConfig 

pub struct KernelConfig {

    pub keypair: Keypair,
    pub ca_public_keys: Vec<PublicKey>,
    pub max_delegation_depth: u32,
    pub policy_hash: String,
    pub allow_sampling: bool,
    pub allow_sampling_tool_use: bool,
    pub allow_elicitation: bool,
    pub max_stream_duration_secs: u64,
    pub max_stream_total_bytes: u64,
    pub require_web3_evidence: bool,
    pub allow_ephemeral_receipt_log: bool,
    pub allow_ephemeral_revocation_store: bool,
    pub checkpoint_batch_size: u64,
    pub retention_config: Option<RetentionConfig>,
    pub memory_budget: MemoryBudgetConfig,
    pub deadlines: HotPathDeadlineConfig,
}

Configuration for the Chio Runtime Kernel.

Fields

keypair: Keypair

Ed25519 keypair for signing receipts and issuing capabilities.

ca_public_keys: Vec<PublicKey>

Public keys of trusted Capability Authorities.

max_delegation_depth: u32

Maximum allowed delegation depth.

policy_hash: String

SHA-256 hash of the active policy (embedded in receipts).

allow_sampling: bool

Whether nested sampling requests are allowed at all.

allow_sampling_tool_use: bool

Whether sampling requests may include tool-use affordances.

allow_elicitation: bool

Whether nested elicitation requests are allowed.

max_stream_duration_secs: u64

Maximum total wall-clock duration permitted for one streamed tool result.

max_stream_total_bytes: u64

Maximum total canonical payload size permitted for one streamed tool result.

require_web3_evidence: bool

Whether durable receipts and kernel-signed checkpoints are mandatory prerequisites for this deployment.

allow_ephemeral_receipt_log: bool

Allow process-local receipt logs when no durable receipt store is installed. This is for tests and local scaffolds only; protocol deployments should leave it false so successful dispatch requires durable receipt persistence before any tool side effect.

allow_ephemeral_revocation_store: bool

Allow a process-local (in-memory) revocation store when no durable or remote revocation source is installed. This is for tests and local scaffolds only; deployments should leave it false so a revoked capability cannot be re-accepted after a restart drops the revocation set.

checkpoint_batch_size: u64

Number of receipts between Merkle checkpoint snapshots. Default: 100.

Set to 0 to disable automatic checkpointing for deployments that do not require web3 evidence.

retention_config: Option<RetentionConfig>

Optional receipt retention configuration.

When None (default), retention is disabled and receipts accumulate indefinitely. When Some(config), the kernel will archive receipts that exceed the time or size threshold.

memory_budget: MemoryBudgetConfig

Per-process memory budget (bounded-structure caps + RSS soft ceiling).

deadlines: HotPathDeadlineConfig

Wall-clock budgets for the mediation hot path. Construction input only, not a wire payload, so this changes no signed or transmitted bytes.