Enum Obligation 

pub enum Obligation {
    Audit {
        tag: String,
    },
    RateLimit {
        window_secs: u64,
        max: u32,
    },
    Custom {
        value: Value,
    },
}

Side-effects a policy may attach to an Allow decision.

v0 obligation handling is intentionally narrow:

• Audit obligations are persisted inside the dispatch AuditEvent when an EventStore is wired; otherwise they are emitted through tracing only.
• RateLimit and Custom obligations are NOT enforced in v0.

RateLimit validates that window_secs > 0 and max > 0 at construction and deserialization.

Variants

Audit

Fields

tag: String

RateLimit

Fields

window_secs: u64

max: u32

Custom

Escape hatch for policy-specific obligations. value accepts ARBITRARY JSON (objects, arrays, scalars, null) — the struct-like variant shape is required because serde’s internally-tagged enums cannot merge the kind discriminator into a non-object newtype payload.

Fields

value: Value

Implementations

impl Obligation

pub fn try_rate_limit( window_secs: u64, max: u32, ) -> Result<Obligation, GateValidationError>

Create a validated RateLimit obligation. Returns Err if window_secs or max is zero.

pub fn rate_limit(window_secs: u64, max: u32) -> Obligation

Create a validated RateLimit obligation. Panics if window_secs or max is zero.

Trait Implementations

impl Clone for Obligation

fn clone(&self) -> Obligation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Obligation

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Obligation

fn deserialize<D>( deserializer: D, ) -> Result<Obligation, <D as Deserializer<'de>>::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Obligation

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl TryFrom<RawObligation> for Obligation

type Error = GateValidationError

The type returned in the event of a conversion error.

fn try_from( raw: RawObligation, ) -> Result<Obligation, <Obligation as TryFrom<RawObligation>>::Error>

Performs the conversion.