Struct SecurityPolicy 

pub struct SecurityPolicy {
    pub config: PolicyConfig,
    pub workspace_dir: PathBuf,
    /* private fields */
}

Security policy with runtime state

Fields

config: PolicyConfig

workspace_dir: PathBuf

Implementations

impl SecurityPolicy

pub fn new(config: PolicyConfig, workspace_dir: PathBuf) -> Self

Create a new security policy

pub fn default_for(workspace_dir: PathBuf) -> Self

Create with default config

pub fn can_act(&self) -> bool

Check if the agent can perform write actions

pub fn autonomy(&self) -> AutonomyLevel

Get autonomy level

pub fn is_rate_limited(&self) -> bool

Check if rate limited

pub fn record_action(&self) -> bool

Record an action and return true if allowed

pub fn remaining_actions(&self) -> u32

Get remaining actions this hour

pub fn validate_command( &self, command: &str, approved: bool, ) -> ActionValidation

Validate a command execution

pub fn validate_path(&self, path: &str, write: bool) -> ActionValidation

Validate a file path access

pub fn is_path_in_workspace(&self, resolved: &Path) -> bool

Check if a resolved path is within workspace