Struct GateEnvPolicy 

pub struct GateEnvPolicy {
    pub home: PathBuf,
    pub passthrough: Vec<String>,
}

The OPERATOR-owned half of every gate command’s environment, carried from mission config through ProvisionSpec onto the WorkspaceHandle so each of the four contract-declared command lanes (bootstrap, readiness, data hooks, disk.prune) builds the same env from the same inputs.

Fields

home: PathBuf

The ONE scratch HOME/TMPDIR/CARGO_HOME every gate phase of this mission run shares (follow-up review, M-1: a per-phase home deleted bootstrap’s output before readiness could see it).

passthrough: Vec<String>

The operator’s contractEnvPassthrough — the second party in the two-party consent a contract secrets[] name needs before it crosses (follow-up review, H-6). Operator-only by construction: the key is in config.rs’s PROJECT_LAYER_REFUSED, so repo content cannot set it.

Implementations

impl GateEnvPolicy

pub fn for_mission(runtime_dir: &Path, passthrough: &[String]) -> Self

The policy for one mission run: the gate home under the mission’s own writable runs/ dir, plus the operator’s passthrough list.

Trait Implementations

impl Clone for GateEnvPolicy

fn clone(&self) -> GateEnvPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GateEnvPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.