Crate ferrify_infra 

Runtime primitives for verification, sandbox selection, and tool brokering.

agent-infra defines the boundary between Ferrify’s control-plane types and the outside world. This includes sandbox selection, tool-broker contracts, and the verification backend that shells out to Cargo.

The crate stays intentionally small in the starter implementation. The goal is to make operational boundaries explicit before adding richer runtimes or external integrations.

Examples

use agent_domain::ModeSlug;
use agent_infra::{SandboxManager, SandboxProfile};

let mode = ModeSlug::new("verifier").expect("verifier is a valid mode slug");
assert_eq!(
    SandboxManager::profile_for_mode(&mode),
    SandboxProfile::ReadOnlyWorkspace
);

Structs

AuditRecord

An audit record for a tool invocation.

DenyByDefaultToolBroker

A deny-by-default broker used by Ferrify.

ObservedFact

A fact observed from tool output.

ProcessVerificationBackend

A process-based verification backend that shells out to Cargo.

SandboxManager

Chooses runtime sandbox profiles for modes.

ToolOutputBlob

A normalized tool output blob.

ToolReceipt

The normalized result returned by a brokered tool call.

ToolRequest

A raw tool request that must pass through the broker.

Enums

InfraError

Errors produced by the infrastructure layer.

SandboxProfile

The sandbox profile attached to a stage.

ToolError

Errors produced by tool brokering.

Traits

ToolBroker

A broker that mediates tool execution under policy.

VerificationBackend

Runs verification commands and returns receipts.