Enum SandboxProfile 

pub enum SandboxProfile {
    ReadOnly,
    RepoWrite,
    NoNetwork,
    FullDev,
    CiOnly,
}

A coarse capability profile a caller may request of the sandbox.

Intentionally a small, stable set; saorsa-sandbox may refine it. The variants describe what the caller wants confined, not how.

Variants

ReadOnly

No writes anywhere (read-only views, inspection).

RepoWrite

Writes allowed inside the workspace only.

NoNetwork

Workspace writes plus no network egress.

FullDev

Full local dev (writes + network), still process-confined.

CiOnly

CI-only: enforced hermetic build, no host access.

Trait Implementations

impl Clone for SandboxProfile

fn clone(&self) -> SandboxProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxProfile

impl Debug for SandboxProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SandboxProfile

impl PartialEq for SandboxProfile

fn eq(&self, other: &SandboxProfile) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SandboxProfile