Enum OnUnavailable 

pub enum OnUnavailable {
    Refuse,
    Degrade,
}

What to do when a requested profile cannot be fully enforced.

Variants

Refuse

Fail loud: refuse to build the session. Correct default for untrusted work — never silently run without the requested boundary.

Degrade

Proceed with degraded containment when the backend falls short. The degrade is graded by what the backend can still do:

• Partial enforcement (e.g. network blocked but writes only path-confined): the backend is kept attached — partial enforcement beats dropping to pure path-confinement.
• Unavailable (the backend enforces nothing): the backend is dropped and the session falls back to LocalSessionEnv’s fd-anchored path-confinement (NOT a security boundary — see SECURITY.md).

Trait Implementations

impl Clone for OnUnavailable

fn clone(&self) -> OnUnavailable

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for OnUnavailable

impl Debug for OnUnavailable

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for OnUnavailable

impl PartialEq for OnUnavailable

fn eq(&self, other: &OnUnavailable) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for OnUnavailable