Enum Isolation 

pub enum Isolation {
    None,
    Changes,
    Process,
}

What a backend actually enforces — as distinct from the FsPolicy / NetPolicy it requests. A policy the kernel doesn’t enforce is not isolation, so callers should branch on this, not on the requested policy.

Variants

None

Nothing is enforced; the agent has host access.

Changes

Only changes are isolated (e.g. a git worktree/branch). Capability is not restricted — commands can still read/write/network the host.

Process

Shell subprocesses are confined by the kernel or a container (Seatbelt / Landlock / Docker). In-process fs tools are jailed separately.

Trait Implementations

impl Clone for Isolation

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Isolation

impl Debug for Isolation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Isolation

impl PartialEq for Isolation

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Isolation