Enum GuardAction 

pub enum GuardAction {
    Allow,
    Deny {
        reason: String,
    },
    Warn {
        reason: String,
    },
    Kill {
        reason: String,
    },
}

Action returned by guardrail hooks that can deny operations.

Variants

Allow

Allow the operation to proceed.

Deny

Deny the operation with a reason.

Fields

reason: String

Warn

Log the concern but allow the operation to proceed.

The agent loop treats Warn like Allow but emits AgentEvent::GuardrailWarned and an audit record. This enables monitoring mode (shadow enforcement) without blocking production.

Fields

reason: String

Kill

Immediately terminate the agent run. Used for critical detections (e.g., CSAM, active exploitation) where the agent loop must stop without further processing. The agent emits KillSwitchActivated and returns Error::KillSwitch.

Fields

reason: String

Implementations

impl GuardAction

pub fn deny(reason: impl Into<String>) -> Self

Create a Deny action with the given reason.

pub fn warn(reason: impl Into<String>) -> Self

Create a Warn action with the given reason.

pub fn kill(reason: impl Into<String>) -> Self

Create a Kill action with the given reason.

pub fn is_denied(&self) -> bool

Returns true if this action blocks the operation (Deny or Kill).

pub fn is_killed(&self) -> bool

Returns true if this action terminates the agent run (Kill).

Trait Implementations

impl Clone for GuardAction

fn clone(&self) -> GuardAction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GuardAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for GuardAction

fn eq(&self, other: &GuardAction) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for GuardAction