Skip to main content

enforce_nested_invocation_ceiling

harn_vm::orchestration

Function enforce_nested_invocation_ceiling 

Source 
pub fn enforce_nested_invocation_ceiling(
    parent: &CapabilityPolicy,
    target: &NestedInvocationTarget<'_>,
) -> NestedInvocationCeilingReport
Expand description

Enforce the parent ceiling against a nested invocation target. Returns a populated report; callers reject the launch if report.allowed() is false.