Struct SandboxDecisionDataPermissiveRetryDecided 

pub struct SandboxDecisionDataPermissiveRetryDecided {
    pub command: Option<String>,
    pub confidence: Option<SandboxDenialConfidence>,
    pub control: SandboxControl,
    pub denial_class: Option<SandboxDenialClass>,
    pub denied_resource: Option<String>,
    pub enforcement_point: SandboxEnforcementPoint,
    pub kind: SandboxDecisionDataPermissiveRetryDecidedKind,
    pub outcome: SandboxOutcome,
    pub platform: SandboxPlatform,
    pub process_name: Option<String>,
    pub source: SandboxBypassSource,
    pub tool_call_id: Option<String>,
}

A permissive retry was resolved. Distinct from bypass_decided because this rung never requests a run outside the process sandbox: it relaxes the process container for one run while the sandbox, and with it the network policy, stays attached. Reported for both outcomes, so an escalation the user declined still leaves evidence that the runtime asked and that the sandboxed denial stood.

Fields

command: Option<String>

Command the verdict governs. Populated only when content capture is enabled.

confidence: Option<SandboxDenialConfidence>

How strong the evidence behind denialClass was. Present exactly when denialClass is.

control: SandboxControl

Always process: the process container is what this rung relaxes, and the network control is deliberately untouched.

denial_class: Option<SandboxDenialClass>

Bounded class of the access whose refusal raised this escalation.

denied_resource: Option<String>

Resource whose refusal raised this escalation. Populated only when content capture is enabled.

enforcement_point: SandboxEnforcementPoint

Runtime subsystem the retry applies to

kind: SandboxDecisionDataPermissiveRetryDecidedKind

Sandbox decision variant discriminator.

outcome: SandboxOutcome

Whether the permissive retry was granted: approved or declined. declined also covers the cases where nobody answered, since the sandboxed denial stands either way.

platform: SandboxPlatform

Host operating-system family

process_name: Option<String>

Executable image associated with the denial that raised this escalation, normalized to a basename. Populated only when content capture is enabled.

source: SandboxBypassSource

Where the request originated. Orthogonal to outcome.

tool_call_id: Option<String>

Tool call the decision belongs to, for span correlation only. Never exported as a telemetry attribute or metric dimension.

Trait Implementations

impl Clone for SandboxDecisionDataPermissiveRetryDecided

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxDecisionDataPermissiveRetryDecided

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxDecisionDataPermissiveRetryDecided

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxDecisionDataPermissiveRetryDecided

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxDecisionDataPermissiveRetryDecided

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.