pub struct SandboxDecisionDataPermissiveRetryCompleted {
pub command: Option<String>,
pub confidence: Option<SandboxDenialConfidence>,
pub control: SandboxControl,
pub denial_class: Option<SandboxDenialClass>,
pub denied_resource: Option<String>,
pub enforcement_point: SandboxEnforcementPoint,
pub kind: SandboxDecisionDataPermissiveRetryCompletedKind,
pub outcome: SandboxOutcome,
pub platform: SandboxPlatform,
pub process_name: Option<String>,
pub tool_call_id: Option<String>,
}Expand description
An approved permissive retry finished. succeeded means the retry exited successfully without another correlated sandbox denial; failed means it failed or remained blocked and may therefore be followed by a full bypass.
Fields§
§command: Option<String>Command the retry executed. Populated only when content capture is enabled.
confidence: Option<SandboxDenialConfidence>How strong the evidence behind denialClass was.
control: SandboxControlAlways process: the retry changes process-container enforcement while leaving network policy attached.
denial_class: Option<SandboxDenialClass>Bounded class of the access whose refusal raised the permissive retry.
denied_resource: Option<String>Resource whose refusal raised the retry. Populated only when content capture is enabled.
enforcement_point: SandboxEnforcementPointRuntime subsystem that ran the retry
kind: SandboxDecisionDataPermissiveRetryCompletedKindSandbox decision variant discriminator.
outcome: SandboxOutcomeWhether the permissive retry completed successfully: succeeded or failed.
platform: SandboxPlatformHost operating-system family
process_name: Option<String>Executable image associated with the denial that raised the retry, normalized to a basename. Populated only when content capture is enabled.
tool_call_id: Option<String>Tool call the completion belongs to, for span correlation only. Never exported as a telemetry attribute or metric dimension.