Enum Disposition 

pub enum Disposition {
    Allow,
    Deny {
        stage: &'static str,
        reason: String,
    },
    Gate {
        wait: WaitReason,
        reason: String,
    },
    Defer {
        slot: u32,
    },
    RateLimited {
        retry_after_ms: u64,
    },
}

The kernel’s adjudication of a Syscall. Generalizes GovernanceVerdict: AskUser becomes Disposition::Gate (suspend the calling task via the P2 TCB), which is where this primitive meets P2.

Variants

Allow

Proceed as requested.

Deny

Reject. stage names the gate stage that vetoed.

Fields

stage: &'static str

reason: String

Gate

Suspend the calling task until an external party resolves it (e.g. human approval). reason carries the human-readable justification (e.g. the governance AskUser reason).

Fields

wait: WaitReason

reason: String

Defer

Accept but queue for later scheduling (backpressure).

Fields

slot: u32

RateLimited

Rejected by a rate limiter; retry permitted after the delay.

Fields

retry_after_ms: u64

Implementations

impl Disposition

pub fn label(&self) -> &'static str

pub fn is_allowed(&self) -> bool

Whether the syscall may proceed to execution now.

Trait Implementations

impl Clone for Disposition

fn clone(&self) -> Disposition

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Disposition

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<GovernanceVerdict> for Disposition

Bridge from the existing tool-decision vocabulary. AskUser → Gate(Approval): a tool awaiting human approval suspends the task, which M2+M1 realize via the TCB.

fn from(verdict: GovernanceVerdict) -> Self

Converts to this type from the input type.