Enum SandboxProvider 

pub enum SandboxProvider {
    Process,
    Container,
}

Which sandbox mechanism wraps a role’s sessions when enforce is on.

Variants

Process

Tier-2 process sandboxing (Seatbelt on macOS, bubblewrap on Linux).

Container

Tier-3 container sandboxing on live-proven Linux hosts (see crate::sandbox_container). macOS and Windows refuse until their mount, authority-mask, and egress contracts have continuously enforced release receipts; macOS uses native Seatbelt through the process provider.

Implementations

impl SandboxProvider

pub fn as_str(self) -> &'static str

The config-file spelling of this provider ("process" / "container"), for errors and reports that name it.

pub fn enforces_hard_net_boundary(self, egress: &[String]) -> bool

Whether enforce = "fs+net" under this provider is backed by a HARD network boundary for the given egress list — a session that ignores the run’s egress-proxy env vars still cannot open a direct socket. The process provider qualifies on both supported platforms (macOS Seatbelt cuts outbound TCP to loopback; Linux bwrap --unshare-net removes the network entirely), so its proxy hop is the only reachable way out. The container provider has a static hard boundary with an EMPTY egress list (--network none). A non-empty list is provisioned dynamically for sessions by crate::container_egress; this helper remains false for that pair because engine-run gates do not own that lifecycle and must continue to refuse it. The match is deliberately exhaustive: a future provider must declare itself here.

Trait Implementations

impl Clone for SandboxProvider

fn clone(&self) -> SandboxProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxProvider

impl Debug for SandboxProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxProvider

fn default() -> SandboxProvider

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxProvider

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxProvider

impl PartialEq for SandboxProvider

fn eq(&self, other: &SandboxProvider) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxProvider

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxProvider