Struct SandboxDecisionDataEnforcementState 

pub struct SandboxDecisionDataEnforcementState {
    pub attestation: Option<SandboxAttestation>,
    pub backend: SandboxBackend,
    pub command: Option<String>,
    pub control: SandboxControl,
    pub enforcement_point: SandboxEnforcementPoint,
    pub kind: SandboxDecisionDataEnforcementStateKind,
    pub outcome: SandboxOutcome,
    pub platform: SandboxPlatform,
    pub tool_call_id: Option<String>,
}

Fields

attestation: Option<SandboxAttestation>

Runtime observation backing the state. Omitted for inactive, which has nothing to attest.

backend: SandboxBackend

Containment backend that engaged. unsupported for any state other than engaged, since no backend is known to have run.

command: Option<String>

Command the enforcement governed. Populated only when content capture is enabled, and only for shell commands; MCP, LSP, and search command lines are runtime plumbing.

control: SandboxControl

Enforcement mechanism this decision describes

enforcement_point: SandboxEnforcementPoint

Runtime subsystem whose enforcement this describes

kind: SandboxDecisionDataEnforcementStateKind

Sandbox decision variant discriminator.

outcome: SandboxOutcome

Observed enforcement state: engaged, inactive, or failed. Derived from runtime evidence, never from the configured posture or the compile-time target platform.

platform: SandboxPlatform

Host platform the sandbox is running on

tool_call_id: Option<String>

Internal tool-call ID, used only to correlate the decision with its owning span. Omitted when the decision is not attributable to a tool call.

Trait Implementations

impl Clone for SandboxDecisionDataEnforcementState

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxDecisionDataEnforcementState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxDecisionDataEnforcementState

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxDecisionDataEnforcementState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxDecisionDataEnforcementState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.