Expand description
Enforcer-agnostic declarations and verdicts for host-mediated authority.
This crate deliberately has no runtime dependency. Native and future WASM enforcers share these values; neither gains mutation authority by using them.
Structs§
- Capability
Denied - A typed capability denial returned at the consuming act.
- Capability
Request - A manifest declaration of authority a component may be granted.
- Component
Id - Stable, fixed-width identity for a component and its durable namespace.
- Grant
- One active row in the host grant table.
- Grant
Provenance - Host-supplied audit provenance retained on an active grant row.
- Network
Host - An exact network host. It is never interpreted as a pattern.
- Path
Root - An absolute, lexical filesystem root used by read and write authority.
Enums§
- Capability
- One kind paired with its only valid scope type.
- Capability
Kind - The closed set of host-mediated authority kinds in v1.
- Capability
Scope - A typed scope carried by a verdict for inspection without string parsing.
- Check
Verdict - Fresh result of checking one consuming act.
- Component
IdParse Error - Why a textual component identity could not be constructed.
- Scope
Validation Error - Why a manifest scope is not well formed for v1 matching.